Warning: Permanently added '[localhost]:56279' (ECDSA) to the list of known hosts. 2023/11/18 18:00:41 fuzzer started 2023/11/18 18:00:41 dialing manager at localhost:38365 syzkaller login: [ 34.909730] cgroup: Unknown subsys name 'net' [ 34.910980] cgroup: Unknown subsys name 'net_prio' [ 34.912818] cgroup: Unknown subsys name 'devices' [ 34.914388] cgroup: Unknown subsys name 'blkio' [ 34.959840] cgroup: Unknown subsys name 'hugetlb' [ 34.961327] cgroup: Unknown subsys name 'rlimit' 2023/11/18 18:00:55 syscalls: 2215 2023/11/18 18:00:55 code coverage: enabled 2023/11/18 18:00:55 comparison tracing: enabled 2023/11/18 18:00:55 extra coverage: enabled 2023/11/18 18:00:55 setuid sandbox: enabled 2023/11/18 18:00:55 namespace sandbox: enabled 2023/11/18 18:00:55 Android sandbox: enabled 2023/11/18 18:00:55 fault injection: enabled 2023/11/18 18:00:55 leak checking: enabled 2023/11/18 18:00:55 net packet injection: enabled 2023/11/18 18:00:55 net device setup: enabled 2023/11/18 18:00:55 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2023/11/18 18:00:55 devlink PCI setup: PCI device 0000:00:10.0 is not available 2023/11/18 18:00:55 USB emulation: enabled 2023/11/18 18:00:55 hci packet injection: enabled 2023/11/18 18:00:55 wifi device emulation: enabled 2023/11/18 18:00:55 802.15.4 emulation: enabled 2023/11/18 18:00:55 fetching corpus: 50, signal 30901/32719 (executing program) 2023/11/18 18:00:56 fetching corpus: 100, signal 54000/57369 (executing program) 2023/11/18 18:00:56 fetching corpus: 150, signal 59508/64469 (executing program) 2023/11/18 18:00:56 fetching corpus: 200, signal 66956/73401 (executing program) 2023/11/18 18:00:56 fetching corpus: 250, signal 77946/85726 (executing program) 2023/11/18 18:00:56 fetching corpus: 300, signal 83691/92835 (executing program) 2023/11/18 18:00:56 fetching corpus: 350, signal 92739/103116 (executing program) 2023/11/18 18:00:56 fetching corpus: 400, signal 99394/110967 (executing program) 2023/11/18 18:00:56 fetching corpus: 450, signal 102590/115468 (executing program) 2023/11/18 18:00:56 fetching corpus: 500, signal 108679/122650 (executing program) 2023/11/18 18:00:57 fetching corpus: 550, signal 115033/130056 (executing program) 2023/11/18 18:00:57 fetching corpus: 600, signal 119236/135332 (executing program) 2023/11/18 18:00:57 fetching corpus: 650, signal 122442/139642 (executing program) 2023/11/18 18:00:57 fetching corpus: 700, signal 127276/145414 (executing program) 2023/11/18 18:00:57 fetching corpus: 750, signal 131945/150992 (executing program) 2023/11/18 18:00:57 fetching corpus: 800, signal 136605/156528 (executing program) 2023/11/18 18:00:58 fetching corpus: 850, signal 138824/159759 (executing program) 2023/11/18 18:00:58 fetching corpus: 900, signal 141463/163385 (executing program) 2023/11/18 18:00:58 fetching corpus: 950, signal 143932/166805 (executing program) 2023/11/18 18:00:58 fetching corpus: 1000, signal 148159/171768 (executing program) 2023/11/18 18:00:58 fetching corpus: 1050, signal 151168/175584 (executing program) 2023/11/18 18:00:58 fetching corpus: 1100, signal 154065/179285 (executing program) 2023/11/18 18:00:58 fetching corpus: 1150, signal 156434/182453 (executing program) 2023/11/18 18:00:58 fetching corpus: 1200, signal 159975/186637 (executing program) 2023/11/18 18:00:59 fetching corpus: 1250, signal 162889/190239 (executing program) 2023/11/18 18:00:59 fetching corpus: 1300, signal 166778/194679 (executing program) 2023/11/18 18:00:59 fetching corpus: 1350, signal 168970/197640 (executing program) 2023/11/18 18:00:59 fetching corpus: 1400, signal 171596/200924 (executing program) 2023/11/18 18:00:59 fetching corpus: 1450, signal 173543/203574 (executing program) 2023/11/18 18:00:59 fetching corpus: 1500, signal 175567/206247 (executing program) 2023/11/18 18:00:59 fetching corpus: 1550, signal 177162/208624 (executing program) 2023/11/18 18:01:00 fetching corpus: 1600, signal 178472/210711 (executing program) 2023/11/18 18:01:00 fetching corpus: 1650, signal 179888/212855 (executing program) 2023/11/18 18:01:00 fetching corpus: 1700, signal 182486/215978 (executing program) 2023/11/18 18:01:00 fetching corpus: 1750, signal 184203/218335 (executing program) 2023/11/18 18:01:00 fetching corpus: 1800, signal 185818/220584 (executing program) 2023/11/18 18:01:00 fetching corpus: 1850, signal 187788/223124 (executing program) 2023/11/18 18:01:00 fetching corpus: 1900, signal 189462/225355 (executing program) 2023/11/18 18:01:00 fetching corpus: 1950, signal 190675/227257 (executing program) 2023/11/18 18:01:01 fetching corpus: 2000, signal 192548/229607 (executing program) 2023/11/18 18:01:01 fetching corpus: 2050, signal 193845/231534 (executing program) 2023/11/18 18:01:01 fetching corpus: 2100, signal 195061/233421 (executing program) 2023/11/18 18:01:01 fetching corpus: 2150, signal 196624/235469 (executing program) 2023/11/18 18:01:01 fetching corpus: 2200, signal 198224/237571 (executing program) 2023/11/18 18:01:01 fetching corpus: 2250, signal 199905/239676 (executing program) 2023/11/18 18:01:01 fetching corpus: 2300, signal 200754/241206 (executing program) 2023/11/18 18:01:02 fetching corpus: 2350, signal 201993/243016 (executing program) 2023/11/18 18:01:02 fetching corpus: 2400, signal 203132/244719 (executing program) 2023/11/18 18:01:02 fetching corpus: 2450, signal 204330/246489 (executing program) 2023/11/18 18:01:02 fetching corpus: 2500, signal 205651/248246 (executing program) 2023/11/18 18:01:02 fetching corpus: 2550, signal 206965/250062 (executing program) 2023/11/18 18:01:02 fetching corpus: 2600, signal 208570/252054 (executing program) 2023/11/18 18:01:02 fetching corpus: 2650, signal 209464/253527 (executing program) 2023/11/18 18:01:02 fetching corpus: 2700, signal 210487/255070 (executing program) 2023/11/18 18:01:03 fetching corpus: 2750, signal 211742/256769 (executing program) 2023/11/18 18:01:03 fetching corpus: 2800, signal 213539/258843 (executing program) 2023/11/18 18:01:03 fetching corpus: 2850, signal 214292/260160 (executing program) 2023/11/18 18:01:03 fetching corpus: 2900, signal 215378/261684 (executing program) 2023/11/18 18:01:03 fetching corpus: 2950, signal 216445/263168 (executing program) 2023/11/18 18:01:03 fetching corpus: 3000, signal 217589/264781 (executing program) 2023/11/18 18:01:03 fetching corpus: 3050, signal 218507/266170 (executing program) 2023/11/18 18:01:04 fetching corpus: 3100, signal 219492/267562 (executing program) 2023/11/18 18:01:04 fetching corpus: 3150, signal 220468/268983 (executing program) 2023/11/18 18:01:04 fetching corpus: 3200, signal 221831/270611 (executing program) 2023/11/18 18:01:04 fetching corpus: 3250, signal 222849/271995 (executing program) 2023/11/18 18:01:04 fetching corpus: 3300, signal 223529/273186 (executing program) 2023/11/18 18:01:04 fetching corpus: 3350, signal 224243/274362 (executing program) 2023/11/18 18:01:04 fetching corpus: 3400, signal 224973/275581 (executing program) 2023/11/18 18:01:04 fetching corpus: 3450, signal 225867/276849 (executing program) 2023/11/18 18:01:05 fetching corpus: 3500, signal 226700/278144 (executing program) 2023/11/18 18:01:05 fetching corpus: 3550, signal 227439/279350 (executing program) 2023/11/18 18:01:05 fetching corpus: 3600, signal 230420/281883 (executing program) 2023/11/18 18:01:05 fetching corpus: 3650, signal 231362/283131 (executing program) 2023/11/18 18:01:05 fetching corpus: 3700, signal 232216/284319 (executing program) 2023/11/18 18:01:05 fetching corpus: 3750, signal 233296/285637 (executing program) 2023/11/18 18:01:05 fetching corpus: 3800, signal 234556/287068 (executing program) 2023/11/18 18:01:06 fetching corpus: 3850, signal 235284/288184 (executing program) 2023/11/18 18:01:06 fetching corpus: 3900, signal 236278/289434 (executing program) 2023/11/18 18:01:06 fetching corpus: 3950, signal 236956/290473 (executing program) 2023/11/18 18:01:06 fetching corpus: 4000, signal 237704/291596 (executing program) 2023/11/18 18:01:06 fetching corpus: 4050, signal 238695/292825 (executing program) 2023/11/18 18:01:06 fetching corpus: 4100, signal 239423/293888 (executing program) 2023/11/18 18:01:06 fetching corpus: 4150, signal 240346/295074 (executing program) 2023/11/18 18:01:07 fetching corpus: 4200, signal 241022/296088 (executing program) 2023/11/18 18:01:07 fetching corpus: 4250, signal 241894/297224 (executing program) 2023/11/18 18:01:07 fetching corpus: 4300, signal 242522/298179 (executing program) 2023/11/18 18:01:07 fetching corpus: 4350, signal 243138/299108 (executing program) 2023/11/18 18:01:07 fetching corpus: 4400, signal 244004/300237 (executing program) 2023/11/18 18:01:07 fetching corpus: 4450, signal 244810/301262 (executing program) 2023/11/18 18:01:07 fetching corpus: 4500, signal 245617/302308 (executing program) 2023/11/18 18:01:07 fetching corpus: 4550, signal 246246/303262 (executing program) 2023/11/18 18:01:08 fetching corpus: 4600, signal 246915/304265 (executing program) 2023/11/18 18:01:08 fetching corpus: 4650, signal 247693/305235 (executing program) 2023/11/18 18:01:08 fetching corpus: 4700, signal 248429/306191 (executing program) 2023/11/18 18:01:08 fetching corpus: 4750, signal 249332/307192 (executing program) 2023/11/18 18:01:08 fetching corpus: 4800, signal 250116/308161 (executing program) 2023/11/18 18:01:08 fetching corpus: 4850, signal 250854/309098 (executing program) 2023/11/18 18:01:08 fetching corpus: 4900, signal 251582/309993 (executing program) 2023/11/18 18:01:09 fetching corpus: 4950, signal 252388/310991 (executing program) 2023/11/18 18:01:09 fetching corpus: 5000, signal 253242/311921 (executing program) 2023/11/18 18:01:09 fetching corpus: 5050, signal 254021/312842 (executing program) 2023/11/18 18:01:09 fetching corpus: 5100, signal 254635/313718 (executing program) 2023/11/18 18:01:09 fetching corpus: 5150, signal 255263/314544 (executing program) 2023/11/18 18:01:09 fetching corpus: 5200, signal 256070/315414 (executing program) 2023/11/18 18:01:09 fetching corpus: 5250, signal 257008/316398 (executing program) 2023/11/18 18:01:10 fetching corpus: 5300, signal 257607/317227 (executing program) 2023/11/18 18:01:10 fetching corpus: 5350, signal 258162/318034 (executing program) 2023/11/18 18:01:10 fetching corpus: 5400, signal 258709/318800 (executing program) 2023/11/18 18:01:10 fetching corpus: 5450, signal 259273/319541 (executing program) 2023/11/18 18:01:10 fetching corpus: 5500, signal 259886/320325 (executing program) 2023/11/18 18:01:10 fetching corpus: 5550, signal 260588/321119 (executing program) 2023/11/18 18:01:10 fetching corpus: 5600, signal 261314/321964 (executing program) 2023/11/18 18:01:10 fetching corpus: 5650, signal 261887/322741 (executing program) 2023/11/18 18:01:11 fetching corpus: 5700, signal 262767/323613 (executing program) 2023/11/18 18:01:11 fetching corpus: 5750, signal 263180/324302 (executing program) 2023/11/18 18:01:11 fetching corpus: 5800, signal 263912/325093 (executing program) 2023/11/18 18:01:11 fetching corpus: 5850, signal 264611/325878 (executing program) 2023/11/18 18:01:11 fetching corpus: 5900, signal 264987/326506 (executing program) 2023/11/18 18:01:11 fetching corpus: 5950, signal 265593/327217 (executing program) 2023/11/18 18:01:11 fetching corpus: 6000, signal 266213/327940 (executing program) 2023/11/18 18:01:11 fetching corpus: 6050, signal 266789/328647 (executing program) 2023/11/18 18:01:12 fetching corpus: 6100, signal 267404/329352 (executing program) 2023/11/18 18:01:12 fetching corpus: 6150, signal 267932/330039 (executing program) 2023/11/18 18:01:12 fetching corpus: 6200, signal 268513/330743 (executing program) 2023/11/18 18:01:12 fetching corpus: 6250, signal 268887/331345 (executing program) 2023/11/18 18:01:12 fetching corpus: 6300, signal 269434/332045 (executing program) 2023/11/18 18:01:12 fetching corpus: 6350, signal 269823/332656 (executing program) 2023/11/18 18:01:12 fetching corpus: 6400, signal 270506/333371 (executing program) 2023/11/18 18:01:12 fetching corpus: 6450, signal 271039/333989 (executing program) 2023/11/18 18:01:13 fetching corpus: 6500, signal 271521/334601 (executing program) 2023/11/18 18:01:13 fetching corpus: 6550, signal 272404/335320 (executing program) 2023/11/18 18:01:13 fetching corpus: 6600, signal 272811/335910 (executing program) 2023/11/18 18:01:13 fetching corpus: 6650, signal 273225/336457 (executing program) 2023/11/18 18:01:13 fetching corpus: 6700, signal 273851/337090 (executing program) 2023/11/18 18:01:13 fetching corpus: 6750, signal 274463/337754 (executing program) 2023/11/18 18:01:13 fetching corpus: 6800, signal 274932/338317 (executing program) 2023/11/18 18:01:13 fetching corpus: 6850, signal 275436/338872 (executing program) 2023/11/18 18:01:14 fetching corpus: 6900, signal 276021/339502 (executing program) 2023/11/18 18:01:14 fetching corpus: 6950, signal 276447/340051 (executing program) 2023/11/18 18:01:14 fetching corpus: 7000, signal 277096/340655 (executing program) 2023/11/18 18:01:14 fetching corpus: 7050, signal 277512/341178 (executing program) 2023/11/18 18:01:14 fetching corpus: 7100, signal 277992/341734 (executing program) 2023/11/18 18:01:14 fetching corpus: 7150, signal 278415/342246 (executing program) 2023/11/18 18:01:14 fetching corpus: 7200, signal 279069/342798 (executing program) 2023/11/18 18:01:14 fetching corpus: 7250, signal 279443/343312 (executing program) 2023/11/18 18:01:15 fetching corpus: 7300, signal 279919/343845 (executing program) 2023/11/18 18:01:15 fetching corpus: 7350, signal 280517/344387 (executing program) 2023/11/18 18:01:15 fetching corpus: 7400, signal 280961/344889 (executing program) 2023/11/18 18:01:15 fetching corpus: 7450, signal 281430/345407 (executing program) 2023/11/18 18:01:15 fetching corpus: 7500, signal 282330/345987 (executing program) 2023/11/18 18:01:15 fetching corpus: 7550, signal 282931/346520 (executing program) 2023/11/18 18:01:15 fetching corpus: 7600, signal 283328/347017 (executing program) 2023/11/18 18:01:15 fetching corpus: 7650, signal 283775/347498 (executing program) 2023/11/18 18:01:16 fetching corpus: 7700, signal 284186/347964 (executing program) 2023/11/18 18:01:16 fetching corpus: 7750, signal 284673/348428 (executing program) 2023/11/18 18:01:16 fetching corpus: 7800, signal 285687/348953 (executing program) 2023/11/18 18:01:16 fetching corpus: 7850, signal 286106/349405 (executing program) 2023/11/18 18:01:16 fetching corpus: 7900, signal 286607/349834 (executing program) 2023/11/18 18:01:16 fetching corpus: 7950, signal 287061/350297 (executing program) 2023/11/18 18:01:16 fetching corpus: 8000, signal 287549/350717 (executing program) 2023/11/18 18:01:16 fetching corpus: 8050, signal 287972/351154 (executing program) 2023/11/18 18:01:17 fetching corpus: 8100, signal 288361/351575 (executing program) 2023/11/18 18:01:17 fetching corpus: 8150, signal 288916/352031 (executing program) 2023/11/18 18:01:17 fetching corpus: 8200, signal 289458/352492 (executing program) 2023/11/18 18:01:17 fetching corpus: 8250, signal 289766/352900 (executing program) 2023/11/18 18:01:17 fetching corpus: 8300, signal 290183/353302 (executing program) 2023/11/18 18:01:17 fetching corpus: 8350, signal 290844/353721 (executing program) 2023/11/18 18:01:17 fetching corpus: 8400, signal 291307/354106 (executing program) 2023/11/18 18:01:18 fetching corpus: 8450, signal 291652/354502 (executing program) 2023/11/18 18:01:18 fetching corpus: 8500, signal 291931/354896 (executing program) 2023/11/18 18:01:18 fetching corpus: 8550, signal 292310/355308 (executing program) 2023/11/18 18:01:18 fetching corpus: 8600, signal 292663/355695 (executing program) 2023/11/18 18:01:18 fetching corpus: 8650, signal 293188/356121 (executing program) 2023/11/18 18:01:18 fetching corpus: 8700, signal 293703/356476 (executing program) 2023/11/18 18:01:18 fetching corpus: 8750, signal 294299/356854 (executing program) 2023/11/18 18:01:18 fetching corpus: 8800, signal 294685/357220 (executing program) 2023/11/18 18:01:19 fetching corpus: 8850, signal 295080/357589 (executing program) 2023/11/18 18:01:19 fetching corpus: 8900, signal 295477/357954 (executing program) 2023/11/18 18:01:19 fetching corpus: 8950, signal 295861/358304 (executing program) 2023/11/18 18:01:19 fetching corpus: 9000, signal 296447/358365 (executing program) 2023/11/18 18:01:19 fetching corpus: 9050, signal 296890/358365 (executing program) 2023/11/18 18:01:19 fetching corpus: 9100, signal 297286/358365 (executing program) 2023/11/18 18:01:20 fetching corpus: 9150, signal 297917/358365 (executing program) 2023/11/18 18:01:20 fetching corpus: 9200, signal 298269/358365 (executing program) 2023/11/18 18:01:20 fetching corpus: 9250, signal 298638/358365 (executing program) 2023/11/18 18:01:20 fetching corpus: 9300, signal 299261/358365 (executing program) 2023/11/18 18:01:20 fetching corpus: 9350, signal 299628/358365 (executing program) 2023/11/18 18:01:20 fetching corpus: 9400, signal 300009/358365 (executing program) 2023/11/18 18:01:20 fetching corpus: 9450, signal 300339/358366 (executing program) 2023/11/18 18:01:21 fetching corpus: 9500, signal 300788/358366 (executing program) 2023/11/18 18:01:21 fetching corpus: 9550, signal 301162/358366 (executing program) 2023/11/18 18:01:21 fetching corpus: 9600, signal 301428/358366 (executing program) 2023/11/18 18:01:21 fetching corpus: 9650, signal 301929/358368 (executing program) 2023/11/18 18:01:21 fetching corpus: 9700, signal 302202/358369 (executing program) 2023/11/18 18:01:21 fetching corpus: 9750, signal 302622/358369 (executing program) 2023/11/18 18:01:21 fetching corpus: 9800, signal 303018/358369 (executing program) 2023/11/18 18:01:21 fetching corpus: 9850, signal 303368/358369 (executing program) 2023/11/18 18:01:22 fetching corpus: 9900, signal 303783/358369 (executing program) 2023/11/18 18:01:22 fetching corpus: 9950, signal 304125/358369 (executing program) 2023/11/18 18:01:22 fetching corpus: 10000, signal 304389/358369 (executing program) 2023/11/18 18:01:22 fetching corpus: 10050, signal 304781/358369 (executing program) 2023/11/18 18:01:22 fetching corpus: 10100, signal 305174/358369 (executing program) 2023/11/18 18:01:22 fetching corpus: 10150, signal 305650/358369 (executing program) 2023/11/18 18:01:22 fetching corpus: 10200, signal 306002/358369 (executing program) 2023/11/18 18:01:22 fetching corpus: 10250, signal 306485/358369 (executing program) 2023/11/18 18:01:23 fetching corpus: 10300, signal 306923/358369 (executing program) 2023/11/18 18:01:23 fetching corpus: 10350, signal 307266/358369 (executing program) 2023/11/18 18:01:23 fetching corpus: 10400, signal 307613/358369 (executing program) 2023/11/18 18:01:23 fetching corpus: 10450, signal 308159/358370 (executing program) 2023/11/18 18:01:23 fetching corpus: 10500, signal 308470/358370 (executing program) 2023/11/18 18:01:23 fetching corpus: 10550, signal 308959/358370 (executing program) 2023/11/18 18:01:23 fetching corpus: 10600, signal 309316/358370 (executing program) 2023/11/18 18:01:24 fetching corpus: 10650, signal 309597/358370 (executing program) 2023/11/18 18:01:24 fetching corpus: 10700, signal 309945/358370 (executing program) 2023/11/18 18:01:24 fetching corpus: 10750, signal 310264/358370 (executing program) 2023/11/18 18:01:24 fetching corpus: 10800, signal 310651/358370 (executing program) 2023/11/18 18:01:24 fetching corpus: 10850, signal 310880/358370 (executing program) 2023/11/18 18:01:24 fetching corpus: 10900, signal 311230/358370 (executing program) 2023/11/18 18:01:24 fetching corpus: 10950, signal 311574/358370 (executing program) 2023/11/18 18:01:24 fetching corpus: 11000, signal 311820/358370 (executing program) 2023/11/18 18:01:24 fetching corpus: 11050, signal 312338/358370 (executing program) 2023/11/18 18:01:25 fetching corpus: 11100, signal 312651/358370 (executing program) 2023/11/18 18:01:25 fetching corpus: 11150, signal 312945/358370 (executing program) 2023/11/18 18:01:25 fetching corpus: 11200, signal 313335/358370 (executing program) 2023/11/18 18:01:25 fetching corpus: 11250, signal 313523/358370 (executing program) 2023/11/18 18:01:25 fetching corpus: 11300, signal 313882/358370 (executing program) 2023/11/18 18:01:25 fetching corpus: 11350, signal 314388/358370 (executing program) 2023/11/18 18:01:25 fetching corpus: 11400, signal 314764/358370 (executing program) 2023/11/18 18:01:26 fetching corpus: 11450, signal 315236/358370 (executing program) 2023/11/18 18:01:26 fetching corpus: 11500, signal 315593/358370 (executing program) 2023/11/18 18:01:26 fetching corpus: 11550, signal 315864/358370 (executing program) 2023/11/18 18:01:26 fetching corpus: 11600, signal 316263/358370 (executing program) 2023/11/18 18:01:26 fetching corpus: 11650, signal 316503/358370 (executing program) 2023/11/18 18:01:26 fetching corpus: 11700, signal 316769/358377 (executing program) 2023/11/18 18:01:26 fetching corpus: 11750, signal 317067/358377 (executing program) 2023/11/18 18:01:27 fetching corpus: 11800, signal 317508/358377 (executing program) 2023/11/18 18:01:27 fetching corpus: 11850, signal 317846/358377 (executing program) 2023/11/18 18:01:27 fetching corpus: 11900, signal 318225/358377 (executing program) 2023/11/18 18:01:27 fetching corpus: 11950, signal 318548/358377 (executing program) 2023/11/18 18:01:27 fetching corpus: 12000, signal 318842/358377 (executing program) 2023/11/18 18:01:27 fetching corpus: 12050, signal 319208/358377 (executing program) 2023/11/18 18:01:27 fetching corpus: 12100, signal 319449/358377 (executing program) 2023/11/18 18:01:28 fetching corpus: 12150, signal 319779/358377 (executing program) 2023/11/18 18:01:28 fetching corpus: 12200, signal 320040/358377 (executing program) 2023/11/18 18:01:28 fetching corpus: 12250, signal 320291/358377 (executing program) 2023/11/18 18:01:28 fetching corpus: 12300, signal 320583/358377 (executing program) 2023/11/18 18:01:28 fetching corpus: 12350, signal 320889/358377 (executing program) 2023/11/18 18:01:28 fetching corpus: 12400, signal 321327/358377 (executing program) 2023/11/18 18:01:28 fetching corpus: 12450, signal 321536/358377 (executing program) 2023/11/18 18:01:29 fetching corpus: 12500, signal 321828/358377 (executing program) 2023/11/18 18:01:29 fetching corpus: 12550, signal 322116/358377 (executing program) 2023/11/18 18:01:29 fetching corpus: 12600, signal 322447/358377 (executing program) 2023/11/18 18:01:29 fetching corpus: 12650, signal 322677/358377 (executing program) 2023/11/18 18:01:29 fetching corpus: 12700, signal 322928/358377 (executing program) 2023/11/18 18:01:29 fetching corpus: 12750, signal 323203/358377 (executing program) 2023/11/18 18:01:29 fetching corpus: 12800, signal 323505/358377 (executing program) 2023/11/18 18:01:30 fetching corpus: 12850, signal 323789/358377 (executing program) 2023/11/18 18:01:30 fetching corpus: 12900, signal 324066/358377 (executing program) 2023/11/18 18:01:30 fetching corpus: 12950, signal 324497/358377 (executing program) 2023/11/18 18:01:30 fetching corpus: 13000, signal 324831/358377 (executing program) 2023/11/18 18:01:30 fetching corpus: 13050, signal 325033/358377 (executing program) 2023/11/18 18:01:30 fetching corpus: 13100, signal 325370/358377 (executing program) 2023/11/18 18:01:30 fetching corpus: 13150, signal 325734/358387 (executing program) 2023/11/18 18:01:31 fetching corpus: 13200, signal 325960/358387 (executing program) 2023/11/18 18:01:31 fetching corpus: 13250, signal 326227/358387 (executing program) 2023/11/18 18:01:31 fetching corpus: 13300, signal 326478/358387 (executing program) 2023/11/18 18:01:31 fetching corpus: 13350, signal 326752/358387 (executing program) 2023/11/18 18:01:31 fetching corpus: 13400, signal 327020/358387 (executing program) 2023/11/18 18:01:31 fetching corpus: 13450, signal 327281/358387 (executing program) 2023/11/18 18:01:31 fetching corpus: 13500, signal 327548/358387 (executing program) 2023/11/18 18:01:31 fetching corpus: 13550, signal 327926/358387 (executing program) 2023/11/18 18:01:31 fetching corpus: 13600, signal 328227/358387 (executing program) 2023/11/18 18:01:32 fetching corpus: 13650, signal 328548/358387 (executing program) 2023/11/18 18:01:32 fetching corpus: 13700, signal 328753/358387 (executing program) 2023/11/18 18:01:32 fetching corpus: 13750, signal 329035/358387 (executing program) 2023/11/18 18:01:32 fetching corpus: 13800, signal 329284/358387 (executing program) 2023/11/18 18:01:32 fetching corpus: 13850, signal 329541/358387 (executing program) 2023/11/18 18:01:32 fetching corpus: 13900, signal 329809/358387 (executing program) 2023/11/18 18:01:33 fetching corpus: 13950, signal 330063/358387 (executing program) 2023/11/18 18:01:33 fetching corpus: 14000, signal 330302/358387 (executing program) 2023/11/18 18:01:33 fetching corpus: 14050, signal 330475/358387 (executing program) 2023/11/18 18:01:33 fetching corpus: 14100, signal 330763/358387 (executing program) 2023/11/18 18:01:33 fetching corpus: 14150, signal 330987/358387 (executing program) 2023/11/18 18:01:33 fetching corpus: 14200, signal 331264/358387 (executing program) 2023/11/18 18:01:33 fetching corpus: 14250, signal 331587/358387 (executing program) 2023/11/18 18:01:33 fetching corpus: 14300, signal 331867/358387 (executing program) 2023/11/18 18:01:34 fetching corpus: 14350, signal 332122/358387 (executing program) 2023/11/18 18:01:34 fetching corpus: 14400, signal 332379/358387 (executing program) 2023/11/18 18:01:34 fetching corpus: 14450, signal 332650/358387 (executing program) 2023/11/18 18:01:34 fetching corpus: 14500, signal 332913/358387 (executing program) 2023/11/18 18:01:34 fetching corpus: 14550, signal 333236/358387 (executing program) 2023/11/18 18:01:34 fetching corpus: 14600, signal 333495/358387 (executing program) 2023/11/18 18:01:34 fetching corpus: 14650, signal 333726/358387 (executing program) 2023/11/18 18:01:34 fetching corpus: 14700, signal 333907/358387 (executing program) 2023/11/18 18:01:34 fetching corpus: 14750, signal 334136/358387 (executing program) 2023/11/18 18:01:35 fetching corpus: 14800, signal 334384/358387 (executing program) 2023/11/18 18:01:35 fetching corpus: 14850, signal 334608/358387 (executing program) 2023/11/18 18:01:35 fetching corpus: 14900, signal 334891/358387 (executing program) 2023/11/18 18:01:35 fetching corpus: 14950, signal 335092/358387 (executing program) 2023/11/18 18:01:35 fetching corpus: 15000, signal 335371/358387 (executing program) 2023/11/18 18:01:35 fetching corpus: 15050, signal 335685/358387 (executing program) 2023/11/18 18:01:35 fetching corpus: 15100, signal 336039/358387 (executing program) 2023/11/18 18:01:35 fetching corpus: 15150, signal 336324/358387 (executing program) 2023/11/18 18:01:36 fetching corpus: 15200, signal 336554/358387 (executing program) 2023/11/18 18:01:36 fetching corpus: 15250, signal 336763/358387 (executing program) 2023/11/18 18:01:36 fetching corpus: 15300, signal 337061/358387 (executing program) 2023/11/18 18:01:36 fetching corpus: 15350, signal 337263/358387 (executing program) 2023/11/18 18:01:36 fetching corpus: 15400, signal 337477/358387 (executing program) 2023/11/18 18:01:36 fetching corpus: 15450, signal 337723/358387 (executing program) 2023/11/18 18:01:36 fetching corpus: 15500, signal 337930/358387 (executing program) 2023/11/18 18:01:36 fetching corpus: 15550, signal 338179/358387 (executing program) 2023/11/18 18:01:37 fetching corpus: 15600, signal 338494/358387 (executing program) 2023/11/18 18:01:37 fetching corpus: 15650, signal 338696/358387 (executing program) 2023/11/18 18:01:37 fetching corpus: 15700, signal 339056/358387 (executing program) 2023/11/18 18:01:37 fetching corpus: 15750, signal 339343/358387 (executing program) 2023/11/18 18:01:37 fetching corpus: 15800, signal 339674/358389 (executing program) 2023/11/18 18:01:37 fetching corpus: 15850, signal 339873/358389 (executing program) 2023/11/18 18:01:38 fetching corpus: 15900, signal 340144/358389 (executing program) 2023/11/18 18:01:38 fetching corpus: 15950, signal 340380/358389 (executing program) 2023/11/18 18:01:38 fetching corpus: 16000, signal 340638/358389 (executing program) 2023/11/18 18:01:38 fetching corpus: 16050, signal 340843/358389 (executing program) 2023/11/18 18:01:38 fetching corpus: 16100, signal 341128/358389 (executing program) 2023/11/18 18:01:38 fetching corpus: 16150, signal 341338/358396 (executing program) 2023/11/18 18:01:38 fetching corpus: 16200, signal 341568/358396 (executing program) 2023/11/18 18:01:38 fetching corpus: 16250, signal 341798/358396 (executing program) 2023/11/18 18:01:39 fetching corpus: 16300, signal 342030/358396 (executing program) 2023/11/18 18:01:39 fetching corpus: 16350, signal 342200/358396 (executing program) 2023/11/18 18:01:39 fetching corpus: 16400, signal 342392/358396 (executing program) 2023/11/18 18:01:39 fetching corpus: 16450, signal 342604/358396 (executing program) 2023/11/18 18:01:39 fetching corpus: 16500, signal 342855/358396 (executing program) 2023/11/18 18:01:39 fetching corpus: 16550, signal 343045/358396 (executing program) 2023/11/18 18:01:39 fetching corpus: 16600, signal 343365/358396 (executing program) 2023/11/18 18:01:39 fetching corpus: 16650, signal 343655/358396 (executing program) 2023/11/18 18:01:40 fetching corpus: 16700, signal 343928/358396 (executing program) 2023/11/18 18:01:40 fetching corpus: 16750, signal 344101/358396 (executing program) 2023/11/18 18:01:40 fetching corpus: 16800, signal 344289/358397 (executing program) 2023/11/18 18:01:40 fetching corpus: 16850, signal 344481/358397 (executing program) 2023/11/18 18:01:40 fetching corpus: 16900, signal 344688/358397 (executing program) 2023/11/18 18:01:40 fetching corpus: 16950, signal 344935/358397 (executing program) 2023/11/18 18:01:40 fetching corpus: 17000, signal 345108/358397 (executing program) 2023/11/18 18:01:40 fetching corpus: 17050, signal 345400/358397 (executing program) 2023/11/18 18:01:41 fetching corpus: 17100, signal 345677/358398 (executing program) 2023/11/18 18:01:41 fetching corpus: 17150, signal 345912/358398 (executing program) 2023/11/18 18:01:41 fetching corpus: 17200, signal 346181/358398 (executing program) 2023/11/18 18:01:41 fetching corpus: 17250, signal 346394/358398 (executing program) 2023/11/18 18:01:41 fetching corpus: 17300, signal 346607/358398 (executing program) 2023/11/18 18:01:41 fetching corpus: 17350, signal 346846/358398 (executing program) 2023/11/18 18:01:41 fetching corpus: 17400, signal 347042/358398 (executing program) 2023/11/18 18:01:41 fetching corpus: 17450, signal 347287/358398 (executing program) 2023/11/18 18:01:42 fetching corpus: 17500, signal 347434/358403 (executing program) 2023/11/18 18:01:42 fetching corpus: 17550, signal 347632/358403 (executing program) 2023/11/18 18:01:42 fetching corpus: 17600, signal 347851/358403 (executing program) 2023/11/18 18:01:42 fetching corpus: 17650, signal 348141/358403 (executing program) 2023/11/18 18:01:42 fetching corpus: 17700, signal 348324/358405 (executing program) 2023/11/18 18:01:42 fetching corpus: 17750, signal 348528/358415 (executing program) 2023/11/18 18:01:42 fetching corpus: 17800, signal 348864/358415 (executing program) 2023/11/18 18:01:43 fetching corpus: 17850, signal 349059/358415 (executing program) 2023/11/18 18:01:43 fetching corpus: 17900, signal 349209/358415 (executing program) 2023/11/18 18:01:43 fetching corpus: 17950, signal 349452/358415 (executing program) 2023/11/18 18:01:43 fetching corpus: 18000, signal 349750/358415 (executing program) 2023/11/18 18:01:43 fetching corpus: 18050, signal 349945/358415 (executing program) 2023/11/18 18:01:43 fetching corpus: 18100, signal 350122/358415 (executing program) 2023/11/18 18:01:43 fetching corpus: 18150, signal 350383/358415 (executing program) 2023/11/18 18:01:43 fetching corpus: 18200, signal 350590/358415 (executing program) 2023/11/18 18:01:44 fetching corpus: 18250, signal 350744/358415 (executing program) 2023/11/18 18:01:44 fetching corpus: 18300, signal 350949/358415 (executing program) 2023/11/18 18:01:44 fetching corpus: 18350, signal 351175/358415 (executing program) 2023/11/18 18:01:44 fetching corpus: 18353, signal 351183/358417 (executing program) 2023/11/18 18:01:44 fetching corpus: 18353, signal 351183/358417 (executing program) 2023/11/18 18:01:46 starting 8 fuzzer processes 18:01:46 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = open_tree(r0, &(0x7f0000000040)='./file0\x00', 0x80000) symlinkat(&(0x7f0000000080)='./file0/file0\x00', r1, &(0x7f00000000c0)='./file0\x00') ioctl$BTRFS_IOC_SNAP_DESTROY(r0, 0x5000940f, &(0x7f0000000100)={{r0}, "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"}) r2 = open(&(0x7f0000001100)='./file0/file0\x00', 0x240000, 0x4) r3 = accept$inet6(r0, &(0x7f0000001140)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000001180)=0x1c) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f00000011c0)) ftruncate(r0, 0x100000001) readv(r1, &(0x7f0000001400)=[{&(0x7f0000001200)=""/255, 0xff}, {&(0x7f0000001300)=""/250, 0xfa}], 0x2) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000001440)) r4 = signalfd(0xffffffffffffffff, &(0x7f0000001480)={[0x1]}, 0x8) ioctl$TUNSETSNDBUF(r4, 0x400454d4, &(0x7f00000014c0)=0x291) accept4$inet6(r2, &(0x7f0000001500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000001540)=0x1c, 0x80000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f0000001580)={{0x1, 0x1, 0x18, r3, {0x2}}, './file0\x00'}) fsmount(r5, 0x1, 0x7e) sendfile(r1, r5, &(0x7f00000015c0)=0x6, 0x3) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001600), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r6, &(0x7f0000001640)={'bridge_slave_0', 0x32, 0x32}, 0x11) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001680)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f00000016c0)={0x0, 0x3, 0x7, 0x1}) 18:01:46 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000000)={'vcan0\x00', {0x2, 0x0, @loopback}}) fgetxattr(r0, &(0x7f0000000040)=@known='trusted.overlay.redirect\x00', &(0x7f0000000080)=""/135, 0x87) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f0000000180)=0x2, 0x4) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1, {0x4, 0x1f}}, './file0\x00'}) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f0000000200)=""/227, &(0x7f0000000300)=0xe3) bind$inet6(r2, &(0x7f0000000340)={0xa, 0x4e21, 0x1, @mcast1, 0x80000001}, 0x1c) r3 = syz_io_uring_complete(0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x1c, 0x0, &(0x7f0000000380)=[@enter_looper, @free_buffer, @exit_looper, @increfs={0x40046304, 0x3}], 0xf9, 0x0, &(0x7f00000003c0)="ccf81eaa197fd93637996c631e169fecea69b6124762ccad4ff3aefd27b3465a3bee3fe6cc09f8d080b63b5415e758068b737e25b6be84b89de11deb81b78b14e03698361f7489affb8fc93d5d129461fe5f675458ba823c0a6b0f58c1503ce989a88b411eea31f4e6ce91c5d83dc8fa10c22b0cfcab73a8a38cf8ba53b6bbebf77f753815a393160ffa9e961e0740310aa35d1cfc7d775973a1e78c7cf8baa5cc9311c4cd21badd5fb905181963cd74230b4529e103c1affac75e6e52ea0306a44e871a966aa83ee8fc5f9ebe621c98da2f1c8b781f2d2091d189b664582fc7d98d5917a04f70b9aced99c5c916cad979a7851905593c47f7"}) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000500)=0xb05) setsockopt(r0, 0x1, 0x8, &(0x7f0000000540)="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", 0x1000) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000001540)={{0x1, 0x1, 0x18, r1, {0x10001, 0x2}}, './file0\x00'}) clock_gettime(0x0, &(0x7f00000029c0)={0x0, 0x0}) recvmmsg(r4, &(0x7f0000002980)=[{{0x0, 0x0, &(0x7f00000028c0)=[{&(0x7f0000001580)}, {&(0x7f00000015c0)=""/153, 0x99}, {&(0x7f0000001680)=""/97, 0x61}, {&(0x7f0000001700)=""/203, 0xcb}, {&(0x7f0000001800)=""/4096, 0x1000}, {&(0x7f0000002800)=""/171, 0xab}], 0x6, &(0x7f0000002940)=""/42, 0x2a}, 0x4}], 0x1, 0x2000, &(0x7f0000002a00)={r5, r6+10000000}) fsmount(r1, 0x0, 0x47ce249ef85e7a78) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r4, 0x8983, &(0x7f0000002a40)={0x6, 'veth1\x00', {0x10001}, 0x408}) setsockopt$sock_void(r2, 0x1, 0x1b, 0x0, 0x0) r7 = socket(0x1, 0xa, 0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000002b40)={'gre0\x00', &(0x7f0000002a80)={'gre0\x00', 0x0, 0x8000, 0x7800, 0x4, 0x2, {{0x1a, 0x4, 0x3, 0x3, 0x68, 0x67, 0x0, 0xde, 0x4, 0x0, @loopback, @private=0xa010102, {[@generic={0x94, 0x4, '\nD'}, @timestamp_prespec={0x44, 0x2c, 0x33, 0x3, 0x9, [{@dev={0xac, 0x14, 0x14, 0x19}, 0x20}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@local, 0x2}, {@private=0xa010101, 0x8}, {@private=0xa010100, 0x1000}]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x1d, 0x1, [{0x7, 0x4, "3798"}, {0x1, 0x7, "77125763bd"}, {0x55f805ee1b7cf232, 0xc, "d72468cadb42c3c06272"}]}]}}}}}) 18:01:46 executing program 2: sysfs$3(0x3) sysfs$3(0x3) sysfs$3(0x3) sysfs$3(0x3) sysfs$3(0x3) sysfs$3(0x3) sysfs$3(0x3) sysfs$3(0x3) sysfs$3(0x3) sysfs$3(0x3) sysfs$3(0x3) sysfs$3(0x3) sysfs$3(0x3) sysfs$3(0x3) sysfs$3(0x3) sysfs$3(0x3) sysfs$3(0x3) sysfs$3(0x3) sysfs$3(0x3) sysfs$3(0x3) [ 99.760612] audit: type=1400 audit(1700330506.947:6): avc: denied { execmem } for pid=272 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 18:01:46 executing program 7: setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x9}}, 0x0, 0x0, 0x2a, 0x0, "05fc0eed0d3d04afd08d206c7d44de1db0dfd58b5cc1d6b303dcc862a80e897960d68948bfff45e356373df9030893fd7bfc9db81f20a4a4cd5c8b951d81a9b1f37638f93069e7907ad6ecf3c27772c2"}, 0xd8) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x81, 0x24, 0xfffffffb, 0x0, @private2, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xa0, 0x7, 0x2}}) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x118) ioctl$FIGETBSZ(r1, 0x2, &(0x7f0000000200)) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = openat(r2, &(0x7f0000000280)='./file0\x00', 0x400, 0x1c) setsockopt$inet6_tcp_int(r3, 0x6, 0x18, &(0x7f00000002c0)=0xd484, 0x4) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000300)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) bind$inet6(r4, &(0x7f0000000340)={0xa, 0x4e24, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x101}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f0000000380)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffe0}}, './file0\x00'}) sendmsg$inet6(r5, &(0x7f0000000680)={&(0x7f00000003c0)={0xa, 0x4e22, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8001}, 0x1c, &(0x7f0000000600)=[{&(0x7f0000000400)="2547bc524a7c17f378bd7bd28c2ba8386be6bcfcc61efc763a99a7479c10cea8fb0a292b9620", 0x26}, {&(0x7f0000000440)="77eee740e6b275f6a929b845550f15075c719f5a47254cadc4bfdc118a041b3b1854063164a5da8786ec014bde6e46dea103937f74348411fc31e3bf8d58ba60a916325879623513c30a557951903164005decff67516d410569ce0e8491c66fe04505478391c81bad010a81cbec2dcf2e65e2a52989ecd55aaa885e12724d9ea5371b006447433bf92a75bb546045e6e00c33e29bfdd32145a3a0d4c6de1ea7b779ae94bef995bec51805cad5919fc78a8451dbf0de10807241613e55c3827aa6259c212ae950d3038dec5af844936e438d692bddc475235b23e23fbbdd57a378da10e4cd31762eb844374ee83537131d61482f18", 0xf5}, {&(0x7f0000000540)="1498b072fe172ce02129221e8903911f6dccb433a032f01d7c4465c2733534fa8e281606e26433947ebd333e7fb0fa885114da1ea16df91c7726a89764a6e5054090dc197aeff89d6552a98f8aff7332da360f3cb901fd64560efa1dcef7ffd47b7cf5b913717c85e597c88e6095c798958f6cb4426182b3649f978e7c066236de3e9fd316c242173497585852b0f74ff6d1d87bf1b166ae7af66987e269b3b23f97f80edc7e7777252c69629d4139441fe7fc642508ee981c95", 0xba}], 0x3, &(0x7f0000000640)=[@pktinfo={{0x24, 0x29, 0x32, {@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, r0}}}], 0x28}, 0x81) fcntl$getownex(r3, 0x10, &(0x7f00000006c0)={0x0, 0x0}) ioctl$BINDER_FREEZE(r2, 0x400c620e, &(0x7f0000000700)={r6, 0x0, 0x5}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r5, 0xd000943d, &(0x7f0000000740)={0x5c818b04, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x81, "41f2dfab3c9fe4"}) ioctl$BTRFS_IOC_INO_LOOKUP(r3, 0xd0009412, &(0x7f0000001740)={r7, 0x590}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002b00)=[{{&(0x7f0000002740), 0x6e, &(0x7f0000002840)=[{&(0x7f00000027c0)=""/93, 0x5d}], 0x1}}, {{&(0x7f0000002880), 0x6e, &(0x7f0000002a80)=[{&(0x7f0000002900)=""/190, 0xbe}, {&(0x7f00000029c0)=""/31, 0x1f}, {&(0x7f0000002a00)=""/112, 0x70}], 0x3, &(0x7f0000002ac0)}}], 0x2, 0x163, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r8, 0x8983, &(0x7f0000002b80)={0x8, 'veth1_to_bond\x00', {'sit0\x00'}, 0x200}) 18:01:46 executing program 3: ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @in_args={0x2}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x2f, 0x0, 0x1, 0x9, 0xc, @empty, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x8, 0x7820, 0x5, 0x8}}) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0xa00, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000140)={'sit0\x00', r1, 0x29, 0x1d, 0x7f, 0x1, 0x5f, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, 0x7, 0x40, 0xd21, 0x5}}) ioctl$IOC_PR_REGISTER(r2, 0x401870c8, &(0x7f0000000200)={0x1000}) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000280)={r3, 0x1, 0x6, @local}, 0x10) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r5) lgetxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)=@known='system.advise\x00', &(0x7f0000000340)=""/72, 0x48) getresuid(&(0x7f0000000480)=0x0, &(0x7f00000004c0), &(0x7f0000000500)) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000e00)={{{@in=@initdev, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in=@loopback}}, &(0x7f0000000f00)=0xe8) mount$9p_unix(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x2802c18, &(0x7f0000000f40)={'trans=unix,', {[{@access_user}, {@aname={'aname', 0x3d, '\x00'}}, {@cache_mmap}, {@access_client}, {@access_uid={'access', 0x3d, r6}}, {@debug={'debug', 0x3d, 0x8}}], [{@smackfshat={'smackfshat', 0x3d, 'system.advise\x00'}}, {@fowner_lt={'fowner<', r8}}, {@fsname={'fsname', 0x3d, 'ip6_vti0\x00'}}, {@subj_type={'subj_type', 0x3d, '{-%#'}}, {@smackfsdef={'smackfsdef', 0x3d, 'system.advise\x00'}}]}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f00000010c0)={'ip6gre0\x00', &(0x7f0000001040)={'sit0\x00', r7, 0x2f, 0x5, 0x20, 0x2, 0x0, @loopback, @private0, 0x700, 0x8000, 0x1f, 0x4}}) fadvise64(0xffffffffffffffff, 0x800, 0x1b, 0x5) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001140), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r4, 0x89f4, &(0x7f0000001200)={'ip6_vti0\x00', &(0x7f0000001180)={'syztnl0\x00', r3, 0x4, 0x2, 0x64, 0x400, 0x10, @empty, @dev={0xfe, 0x80, '\x00', 0x17}, 0x1, 0x1, 0x7337, 0x3}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000001240)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000001300)={'erspan0\x00', &(0x7f0000001280)={'syztnl0\x00', r1, 0x1, 0x40, 0x8, 0x8, {{0x11, 0x4, 0x1, 0x2, 0x44, 0x66, 0x0, 0xff, 0x2f, 0x0, @remote, @loopback, {[@timestamp_addr={0x44, 0x1c, 0x22, 0x1, 0x5, [{@multicast2, 0x7796}, {@local, 0x3}, {@private=0xa010101}]}, @timestamp_addr={0x44, 0x14, 0x18, 0x1, 0x7, [{@rand_addr=0x64010100, 0xfffffff9}, {@local, 0x80}]}]}}}}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f00000014c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001480)={&(0x7f0000001340)={0x104, r10, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x10080}, 0x40855) fallocate(r5, 0x63, 0x11, 0x3) 18:01:46 executing program 5: ptrace$getregset(0x4204, 0x0, 0x6, &(0x7f0000000100)={&(0x7f0000000000)=""/243, 0xf3}) process_vm_readv(0x0, &(0x7f0000000300)=[{&(0x7f0000000140)=""/253, 0xfd}, {&(0x7f0000000240)=""/191, 0xbf}], 0x2, &(0x7f0000002840)=[{&(0x7f0000000340)=""/69, 0x45}, {&(0x7f00000003c0)=""/231, 0xe7}, {&(0x7f00000004c0)=""/131, 0x83}, {&(0x7f0000000580)=""/34, 0x22}, {&(0x7f00000005c0)=""/87, 0x57}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000001640)=""/206, 0xce}, {&(0x7f0000001740)=""/107, 0x6b}, {&(0x7f00000017c0)=""/80, 0x50}, {&(0x7f0000001840)=""/4096, 0x1000}], 0xa, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000002900)='./file0\x00', 0x40001, 0xa1) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x110, r0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000002940)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x3, 0x0, @fd_index=0x6, 0x1c6ef16c, 0x0, 0x0, 0x1, 0x1, {0x2}}, 0x5) r2 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$BTRFS_IOC_QUOTA_RESCAN(r2, 0x4040942c, &(0x7f0000002980)={0x0, 0x8, [0x80000001, 0x2, 0x7, 0x0, 0x7, 0x6]}) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, &(0x7f00000029c0), &(0x7f0000002a00)=0x30) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000002a40)={0x1, 0x9, 0xffff, 0x1, 0xfffffff9}) process_vm_readv(0xffffffffffffffff, &(0x7f0000002d80)=[{&(0x7f0000002a80)=""/165, 0xa5}, {&(0x7f0000002b40)=""/231, 0xe7}, {&(0x7f0000002c40)=""/71, 0x47}, {&(0x7f0000002cc0)=""/145, 0x91}], 0x4, &(0x7f0000002f40)=[{&(0x7f0000002dc0)=""/102, 0x66}, {&(0x7f0000002e40)=""/218, 0xda}], 0x2, 0x0) clock_gettime(0x0, &(0x7f0000002f80)={0x0, 0x0}) syz_io_uring_submit(r1, 0x0, &(0x7f0000003000)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f0000002fc0)={r3, r4+10000000}, 0x1, 0x1}, 0xfffffff8) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000003040)=0x0) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000003140)={&(0x7f0000003080)=""/164, 0xa4}) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000032c0)={&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000003180)=""/49, 0x31, 0x0, &(0x7f00000031c0)=""/208, 0xd0}, &(0x7f0000003300)=0x40) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000003440)={&(0x7f0000003340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000003400)={&(0x7f0000003380)={0x4c, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x20}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8004000}, 0x94) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000003480)={0x0}, &(0x7f00000034c0)=0xc) ptrace$getregset(0x4204, r6, 0x201, &(0x7f0000003540)={&(0x7f0000003500)=""/2, 0x2}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f00000035c0)={0x2, &(0x7f0000003580)=[{0x7, 0x1, 0x1, 0x4}, {0x7, 0x4, 0xc9, 0x1}]}, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000003680)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, r2, 0x80, &(0x7f0000003600)=@pptp={0x18, 0x2, {0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x1) 18:01:47 executing program 4: write(0xffffffffffffffff, &(0x7f0000000000)="85a996cc6a950b0a756eb4805b1afac2765fdc7eb4c78f9f2afd5ad8d560e102d93df5b776c6d8393a5d1db75b42b9388295d7ac4515d2ea25447f0dd6cb7ec7f897c1eeb15f93e5d0bcbcfab4ca184ac38f21e1412da30ef9577dc228ed306550a4bb74e7606bfb6b8eb19247637089a915200e23d7296a91cbea0a7b1f3137688134cab60e1d79704ef7c133783779f10814049ca28f4944b56c8cad34126f6d060a221c6ded3b01e02ebf5aaa188865e0aa33fb7e08ac0d825e9778c2650c1a57ed2dbdfb7c65ec90ff9f4872a75af8d7d131c7f3c7fcc44d4e72fb61fb219469915f6817ddfacb3acbe3cd2c820f", 0xf0) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000140)={0x0, r0, 0xfe, 0x6, 0x80, 0x7ff}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1839c2, 0x141) setxattr$incfs_metadata(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), &(0x7f0000000240)="247d28dc4c029e4c83a877416795d4e5c3d029d2459419671e58685c0dcf751f0d2120d689293e2b6d1c9622c76a30fee227b12b1f5c91a9d6f66e11376e41d85e5f85585a940fedb0f17815d8ca7c440205b178dc510133f19fafb8652658466a402188f683691cda8defbeed07636018005f10cdcebf8e9bb04913a47c364a7016b841eede97ed46f4243adb50c7c48aa4cd8a86d4fa5812e3d3921e1367970479f23e7a169f07581dfc9368f0e434feeedb", 0xb3, 0x0) lseek(r1, 0x7, 0x4) renameat(r1, &(0x7f0000000300)='./file0\x00', r1, &(0x7f0000000340)='./file0\x00') r2 = syz_mount_image$msdos(&(0x7f0000000380), &(0x7f00000003c0)='./file0\x00', 0x200, 0x4, &(0x7f0000000700)=[{&(0x7f0000000400)="f08886ce9e5a6899cf36abee2fc7a9c9147f0f1d8ae598e089fc9874f62ef3a5557ab41c52d9a7da73ad65aa517e5d4c4aab9b096330624b75a9d790eaf2e47bbb34e00c451b083614f6ebe48eba8858e25d760c81e7dc564574ef4131a0594f8206016d7eb0d75737dae157c9ba933e63a56d011d078de44997622958cd85357c1d93aab254e18ee43b0bc4574021d11a6e357ad05fc48ff306d2293a1bb880d2ecff5ffdf65a6a4422", 0xaa, 0x6}, {&(0x7f00000004c0)="3277dfcf6bb59454022b6b3873c94662160c2500c0d8ae17c9bd2a17eb561da2307a54c83315b0b799c198668ce81fc648a658ebb7a0463414fdc95fe2eac9d739813f60421d8f84ed3036abad52ef07bf47737ca7291a8d2012a760ac3a6f51e81b82219147b7c07f7039b7ee7d112061124f9cdf9a08a8b6201ea79269ff0f1ed85926b08eb9cbc27f0e185bb5afbae1fa8a4e23d884883cc4e449b9939042c635f7da02ddf55f12a00af78b64725df472ecf0e115bff3f8f4bd5757410c74ff2edeba804e24dae05222bf5e8e790134ce4046b120f502a1ffbf362743a5439d3d6a34", 0xe4, 0x1000}, {&(0x7f00000005c0)="711fb4411f619a2cf16e66ea74e361a95c90df327258ba9206471a369a6e3c5bbe2a74eae3efbb206de986f4b1e3d05fcc0fb1a337951b842af588a4b97b171e4fb736a2908b2196f2a34c67e2d53ce3c23390dc01e847c94f8e8c283838a5afaaaf537b060cc6343c75a268c1c354bf15e9f480b185ed93473073aa1da61051916e6d40c4bd9831006ed1fded2551a6edd1f07c887ca270174d0b5081997712028ba353b3e0abd1685067f2897f5b88f56478a77c9673c3d5cc9f411a7682cf63", 0xc1, 0xefa}, {&(0x7f00000006c0)="0b01d0d2a15478f26c12fdd289c19ebb8c6deaec4afc9787281c81b8615ac2d1408ba3a11caad9249d3d3171", 0x2c, 0x5e51}], 0x200000, &(0x7f0000000780)={[{@nodots}, {@nodots}, {@dots}, {@nodots}, {@fat=@quiet}, {@nodots}], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_gt={'fowner>', 0xffffffffffffffff}}]}) sendfile(r2, r1, &(0x7f0000000800)=0x772b, 0x8) ioctl$BTRFS_IOC_SPACE_INFO(r1, 0xc0109414, &(0x7f0000000840)={0x6bf, 0x8000, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) getpeername$unix(r1, &(0x7f000000aa40)=@abs, &(0x7f000000aac0)=0x6e) ioctl$TIOCGSERIAL(r1, 0x541e, &(0x7f000000abc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000ab00)=""/155}) getresuid(&(0x7f000000ac80), &(0x7f000000acc0)=0x0, &(0x7f000000ad00)) lchown(&(0x7f000000ac40)='./file0\x00', r3, 0xee00) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000c, 0x810, r1, 0x10000000) r5 = openat$null(0xffffffffffffff9c, &(0x7f000000ad40), 0x5c000, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f000000ad80)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x1, 0x1, {0x0, r6}}, 0xa4c6) r7 = openat(0xffffffffffffffff, &(0x7f000000adc0)='./file0\x00', 0x2a21a0d492e58065, 0x4) openat(r7, &(0x7f000000ae00)='./file0\x00', 0x68c481, 0x0) 18:01:47 executing program 6: sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xf000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x4000) r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r0, 0x400, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}}, 0x40000) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x84, 0x0, 0x300, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x80000001, 0x30}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x7c}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_CSA_IES={0x3c, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0xa, 0xbb, [0x7, 0x6, 0x0]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x10, 0xbb, [0x0, 0x762, 0x6, 0x7, 0x9, 0x44c0]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0xc, 0xba, [0xfeff, 0x101, 0x9, 0x1]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x10, 0xbb, [0xa5e, 0xfff7, 0x8, 0x1c, 0x163a, 0xfffc]}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x20020010}, 0x4004810) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, r0, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x8, @media='udp\x00'}}}, ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x24040094}, 0x8000) ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, &(0x7f0000000540)={0x9, 0x20, '\x00', 0x0, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0]}) r1 = open(&(0x7f0000000580)='./file0\x00', 0x20200, 0x48) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1212600}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0x100, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8000}}]}, 0x100}, 0x1, 0x0, 0x0, 0xc810}, 0x5) r2 = syz_open_procfs(0x0, &(0x7f0000000780)='net/sockstat6\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x34, r0, 0x800, 0x70bd28, 0x25dfdbfd, {{}, {}, {0x18, 0x17, {0x5, 0x9, @udp='udp:syz1\x00'}}}, ["", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x890}, 0x8000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000900)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x3c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SMPS_MODE={0x5}, @NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x2}, @NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x1}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x40) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000a00)={0x1, 0x3000}, 0x4) socketpair(0x8, 0xf, 0xffffffff, &(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r4, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x68, r0, 0x800, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x8, @media='ib\x00'}}}, ["", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x8014}, 0x40) r5 = creat(&(0x7f0000000bc0)='./file0\x00', 0x0) r6 = socket(0x1, 0x4, 0x645) syz_genetlink_get_family_id$smc(&(0x7f0000000c00), r6) sendmsg$NL80211_CMD_SET_KEY(r4, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x20, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x20048014}, 0x20000080) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r5, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x20, 0x0, 0x8, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xe0000000, 0x72}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x8004}, 0x448d0) [ 103.012008] Bluetooth: hci0: command 0x0409 tx timeout [ 103.139532] Bluetooth: hci3: command 0x0409 tx timeout [ 103.203532] Bluetooth: hci1: command 0x0409 tx timeout [ 103.204208] Bluetooth: hci2: command 0x0409 tx timeout [ 103.267576] Bluetooth: hci6: command 0x0409 tx timeout [ 103.267728] Bluetooth: hci7: command 0x0409 tx timeout [ 103.268243] Bluetooth: hci4: command 0x0409 tx timeout [ 103.269148] Bluetooth: hci5: command 0x0409 tx timeout [ 105.059651] Bluetooth: hci0: command 0x041b tx timeout [ 105.187575] Bluetooth: hci3: command 0x041b tx timeout [ 105.251547] Bluetooth: hci2: command 0x041b tx timeout [ 105.252169] Bluetooth: hci1: command 0x041b tx timeout [ 105.315535] Bluetooth: hci5: command 0x041b tx timeout [ 105.316144] Bluetooth: hci4: command 0x041b tx timeout [ 105.316771] Bluetooth: hci7: command 0x041b tx timeout [ 105.317371] Bluetooth: hci6: command 0x041b tx timeout [ 107.107582] Bluetooth: hci0: command 0x040f tx timeout [ 107.235519] Bluetooth: hci3: command 0x040f tx timeout [ 107.299550] Bluetooth: hci1: command 0x040f tx timeout [ 107.300376] Bluetooth: hci2: command 0x040f tx timeout [ 107.363566] Bluetooth: hci6: command 0x040f tx timeout [ 107.364755] Bluetooth: hci7: command 0x040f tx timeout [ 107.365370] Bluetooth: hci4: command 0x040f tx timeout [ 107.366301] Bluetooth: hci5: command 0x040f tx timeout [ 109.155578] Bluetooth: hci0: command 0x0419 tx timeout [ 109.283523] Bluetooth: hci3: command 0x0419 tx timeout [ 109.347525] Bluetooth: hci2: command 0x0419 tx timeout [ 109.348100] Bluetooth: hci1: command 0x0419 tx timeout [ 109.411554] Bluetooth: hci5: command 0x0419 tx timeout [ 109.412157] Bluetooth: hci4: command 0x0419 tx timeout [ 109.412959] Bluetooth: hci7: command 0x0419 tx timeout [ 109.413760] Bluetooth: hci6: command 0x0419 tx timeout [ 116.515934] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.516864] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.518179] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 116.590827] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.591665] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.592960] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 116.772653] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.773681] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.776125] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 116.872978] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.874057] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.875301] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 18:02:04 executing program 7: unlinkat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x80003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = open(0x0, 0x240880, 0x0) mkdirat(r0, &(0x7f0000000200)='./file0\x00', 0x86) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_matches\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) getsockname(r1, &(0x7f0000000240)=@hci, 0x0) r2 = openat$incfs(r0, &(0x7f0000000180)='.pending_reads\x00', 0x13d89fd5ee9571d9, 0x131) unlinkat(r2, &(0x7f00000001c0)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf32(r3, &(0x7f00000098c0)=ANY=[@ANYBLOB="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"], 0x31b) close(r3) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000040)={0x0, 0x4, 0x0, 'queue1\x00', 0xffffffff}) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) [ 116.946676] audit: type=1400 audit(1700330524.138:7): avc: denied { open } for pid=3863 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 116.949118] audit: type=1400 audit(1700330524.138:8): avc: denied { kernel } for pid=3863 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 116.958387] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.959266] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.960926] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 116.982097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.983253] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.984438] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 117.021012] process 'syz-executor.7' launched './file1' with NULL argv: empty string added 18:02:04 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, r0) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, r1) request_key(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0) add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0xfffffffffffffffc) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) [ 117.066894] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.067773] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.069253] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready 18:02:04 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x2001, 0x0) pipe2(0x0, 0x80000) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x480000, 0x70) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$dupfd(r1, 0x0, r2) copy_file_range(r2, &(0x7f0000000040)=0x1, r0, 0x0, 0x7ffb, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe6b02, 0x0) write$tun(r3, &(0x7f0000000300)={@void, @val={0x2, 0x80, 0x3ff, 0x0, 0x9, 0x8b9}, @llc={@snap={0xab, 0xab, "ec", 'j%o', 0x17, "31aa4541a7cf00ccc80d8a91a2e58c3f7009fa5d042551eaf36c3b9584c4363e4a7464a8ccb197cd03e4b759f6562ad4b8df711dc56bba32837dee88a26c8b9c6abf81d42836d36e7d442da86aabe401ee16a03b1a8121f478b69ec34f6caf709ae8b627d71e2c131094e5c4c85a9e0e1f228efffadc203669657d0f63086a949c4db03608f974d6b43f8470617a031e1c072e6866a70b86b719414d2ac1680768fb358ef7aa19b457bb129296e133133c00ede67a6334dca1ae7861384fd1bf1f45071aec48e70cea14265f"}}}, 0xde) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private1}, 0x1c) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(r4, 0xc0403d08, 0x0) [ 117.123151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.125074] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.127731] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 117.166967] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.168565] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.171200] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 117.206556] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.208053] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.210251] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready 18:02:04 executing program 7: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10049, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000100), 0x2}, 0x430}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r2 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r3 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$dupfd(r2, 0x0, r3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd=r0, 0x8, {}, 0x7, 0x3, 0x1, {0x0, 0x0, r3}}, 0x5) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000140)='\x00', 0x0, 0xffffffffffffffff) ioprio_get$pid(0x3, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002040), 0x0, 0x0) kcmp(0x0, 0x0, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000640)=""/4096, &(0x7f0000000180)=0x1000) memfd_create(&(0x7f0000000040)='$:#[*\':-^#\'\x00', 0x0) r4 = creat(&(0x7f0000000480)='./file0\x00', 0xa0) statx(r4, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x80, &(0x7f0000000240)) syz_io_uring_setup(0x2, &(0x7f0000000080)={0x0, 0x0, 0x8, 0xfffffffd, 0x180, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000140)) setpriority(0x1, 0x0, 0x0) [ 117.307734] FAT-fs (loop4): Unrecognized mount option "fowner>18446744073709551615" or missing value [ 117.314902] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.315847] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.317194] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 117.351116] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.352707] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.355469] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 117.395525] hrtimer: interrupt took 27963 ns [ 117.453324] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.455162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.457389] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 117.478517] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.480128] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.481572] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 117.487267] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.488085] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.489409] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 117.693225] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.694135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.695732] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 18:02:18 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x300, 0x70bd27, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}}, 0x40000) r1 = dup2(0xffffffffffffffff, r0) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x28201424}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="e0e32a52", @ANYRES16=0x0, @ANYBLOB="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"], 0x140}, 0x1, 0x0, 0x0, 0x4884}, 0xc8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40200, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) writev(r3, &(0x7f0000000740)=[{&(0x7f00000000c0)="1c54b7", 0x3}], 0x1) pwrite64(r3, &(0x7f00000013c0)="c5", 0x1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x4022812, r2, 0x0) 18:02:18 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext, 0x0, 0x0, 0x800000, 0x1, 0x200000000000, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xf, 0xffffffffffffffff, 0x0) r0 = socket$inet(0xa, 0x3, 0xff) sendto(r0, &(0x7f0000000000)="d4f8dfaa394996add3afd1da13fac83014b8e5c45afa1a1f3ed44d2f6eaf6b5f9203bf69ab683862", 0x28, 0x0, &(0x7f0000000140)=@nl=@unspec={0x0, 0xff00, 0x0, 0xf5ffffff}, 0x80) r1 = gettid() rt_sigqueueinfo(r1, 0x0, &(0x7f0000000600)={0x0, 0x0, 0x80}) syz_open_procfs(r1, &(0x7f0000000580)='coredump_filter\x00') recvmmsg(r0, &(0x7f00000004c0)=[{{&(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000000240)=[{&(0x7f0000002200)=""/102400, 0x19000}, {&(0x7f0000000200)=""/8, 0x8}, {&(0x7f00000002c0)=""/68, 0x44}, {&(0x7f0000000340)=""/208, 0xd0}], 0x4, &(0x7f0000000440)=""/124, 0x7c}, 0x677}], 0x1, 0x100, 0x0) io_submit(0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) add_key$keyring(&(0x7f00000021c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x3, 0x2}, &(0x7f0000000040)='Z.;\xf9\xf6F\xee\x80#', 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/handlers\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280)=[{0x0}], 0x1, 0xf5f, 0x2) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000680), 0x224901, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x9) ioctl$sock_ifreq(r2, 0x0, 0x0) 18:02:18 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) bind(r0, &(0x7f0000000000)=@pptp={0x18, 0x2, {0x1, @empty}}, 0x80) 18:02:18 executing program 6: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x7}, 0x4) sendmmsg$unix(r0, &(0x7f0000002080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}}}], 0x20}}], 0x2, 0x0) 18:02:18 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x6, "77004a6edd440000000008002600"}) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="0040abe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) ioctl$TIOCL_SCROLLCONSOLE(r2, 0x541c, &(0x7f00000000c0)={0xd, 0x1f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r3, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r4 = socket$inet(0x2, 0x6, 0x4) ioctl$TUNSETLINK(r3, 0x400454cd, 0x30a) dup3(r4, r3, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r6 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$dupfd(r5, 0x0, r6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_GET_PIN_FILE(r7, 0x8004f50e, &(0x7f0000000040)) socket$inet(0x2, 0xd, 0x1) [ 131.002660] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 131.002660] program syz-executor.1 not setting count and/or reply_len properly 18:02:18 executing program 7: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10049, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000100), 0x2}, 0x430}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r2 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r3 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$dupfd(r2, 0x0, r3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd=r0, 0x8, {}, 0x7, 0x3, 0x1, {0x0, 0x0, r3}}, 0x5) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000140)='\x00', 0x0, 0xffffffffffffffff) ioprio_get$pid(0x3, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002040), 0x0, 0x0) kcmp(0x0, 0x0, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000640)=""/4096, &(0x7f0000000180)=0x1000) memfd_create(&(0x7f0000000040)='$:#[*\':-^#\'\x00', 0x0) r4 = creat(&(0x7f0000000480)='./file0\x00', 0xa0) statx(r4, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x80, &(0x7f0000000240)) syz_io_uring_setup(0x2, &(0x7f0000000080)={0x0, 0x0, 0x8, 0xfffffffd, 0x180, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000140)) setpriority(0x1, 0x0, 0x0) 18:02:18 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f00000004c0)) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x19, 0x0, 0xfe, 0x1, 0x0, 0x9, 0x165cce79d6df8c8f, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x7fff, 0x2, @perf_config_ext={0x7fff, 0x4}, 0x8028, 0x8, 0x10001, 0x2, 0x1f, 0x0, 0x3ff, 0x0, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0x8, r1, 0x0) 18:02:18 executing program 0: io_submit(0x0, 0x1, &(0x7f00000004c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000200)="d98e6e6b902d57749d126eef91932136e0da5664a6ae70c96556ed69e98a773d5b7aada1afd08c385a2ebec9eb021e0c395383a575ba2953b23a2e19884f786707", 0x41}]) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$dupfd(r0, 0x0, r1) copy_file_range(0xffffffffffffffff, &(0x7f0000000000)=0x7fffffff, r1, &(0x7f0000000040)=0x6, 0x6, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000240)=ANY=[]) [ 131.051018] audit: type=1400 audit(1700330538.242:9): avc: denied { create } for pid=3971 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dccp_socket permissive=1 18:02:18 executing program 6: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x5000) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0) r1 = shmget(0x0, 0x4000, 0x1, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_UNLOCK(r1, 0xc) mbind(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0) 18:02:18 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) ioctl$DVD_AUTH(r0, 0x5390, &(0x7f0000000000)=@lsa={0x0, 0x3}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0xb, 0x7) shutdown(r3, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) fsetxattr$security_capability(r2, &(0x7f0000000000), &(0x7f00000005c0)=@v3={0x3000000, [{0x2, 0x9}, {0x5, 0xfffffff9}]}, 0x18, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) write$binfmt_elf64(r4, &(0x7f0000000600)=ANY=[@ANYBLOB="7f454c460200087c000000000080000002003e0007000000ad010000000000004000000000000000d2010000000000001b090000000138000100010008000400000000700000008008000000000000000400000000000000010000000000000006000000000000000300000000000000050000000000000042ed8b09d7e69e8f5172de2ea7f93b73717a24a84def32ebc708cd89078cf6d0dbf65228627b61abe46432d1fc6a591f2fc178462e079657b9e4b140270de32643016a311270ec5c94fbd4c37011888affcf2cbac778504e5a09a0e80507903983393b1b43a090f4ba5c6d0e2e1d50682b9100"/2780], 0xaea) kcmp(0x0, 0x0, 0x1, r0, r0) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x48042) ioctl$LOOP_SET_FD(r5, 0x4c00, r0) clone3(&(0x7f0000000140)={0x11060900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 131.998059] audit: type=1400 audit(1700330539.179:10): avc: denied { write } for pid=3980 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 18:02:19 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setstatus(r1, 0x4, 0x2000) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x6, @mcast2, 0xdc6}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$inet6(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="29719ea84f4503ceb5fcf5ea0549f4ae77ab00abd023edee71c45435000086c5813ebf7039", 0x25}], 0x1}, 0x10044001) r2 = fork() setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000000140)=0x400, 0x4) ptrace$setopts(0x4200, r2, 0x9, 0x0) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000040)=r2) r3 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r3) bind$inet6(r3, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @mcast2}, 0x1c) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240), 0xc82, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x7, 0x1f, 0x4, 0x3, 0x0, 0x3, 0x8, 0xa, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000040), 0x8}, 0x4800, 0x8, 0x3c1, 0x3, 0x8, 0x20, 0x6, 0x0, 0x800, 0x0, 0x5}, r2, 0x7, r4, 0x1) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ftruncate(r5, 0x1f) r6 = socket$netlink(0x10, 0x3, 0x0) dup3(r6, r0, 0x0) [ 132.026294] FAT-fs (loop0): Unrecognized mount option "" or missing value 18:02:19 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext, 0x0, 0x0, 0x800000, 0x1, 0x200000000000, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xf, 0xffffffffffffffff, 0x0) r0 = socket$inet(0xa, 0x3, 0xff) sendto(r0, &(0x7f0000000000)="d4f8dfaa394996add3afd1da13fac83014b8e5c45afa1a1f3ed44d2f6eaf6b5f9203bf69ab683862", 0x28, 0x0, &(0x7f0000000140)=@nl=@unspec={0x0, 0xff00, 0x0, 0xf5ffffff}, 0x80) r1 = gettid() rt_sigqueueinfo(r1, 0x0, &(0x7f0000000600)={0x0, 0x0, 0x80}) syz_open_procfs(r1, &(0x7f0000000580)='coredump_filter\x00') recvmmsg(r0, &(0x7f00000004c0)=[{{&(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000000240)=[{&(0x7f0000002200)=""/102400, 0x19000}, {&(0x7f0000000200)=""/8, 0x8}, {&(0x7f00000002c0)=""/68, 0x44}, {&(0x7f0000000340)=""/208, 0xd0}], 0x4, &(0x7f0000000440)=""/124, 0x7c}, 0x677}], 0x1, 0x100, 0x0) io_submit(0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) add_key$keyring(&(0x7f00000021c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x3, 0x2}, &(0x7f0000000040)='Z.;\xf9\xf6F\xee\x80#', 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/handlers\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280)=[{0x0}], 0x1, 0xf5f, 0x2) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000680), 0x224901, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x9) ioctl$sock_ifreq(r2, 0x0, 0x0) [ 132.046160] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 132.046160] program syz-executor.1 not setting count and/or reply_len properly 18:02:19 executing program 7: perf_event_open(&(0x7f0000001d80)={0x3, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40000, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f0000000000)={'ah\x00'}, &(0x7f0000000140)=0x1e) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@empty}}, {{@in=@broadcast}, 0x0, @in=@local}}, &(0x7f0000000100)=0xe8) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f00000001c0)=ANY=[], 0xfdef) accept4$inet(0xffffffffffffffff, &(0x7f0000000540)={0x2, 0x0, @multicast2}, &(0x7f0000000580)=0x10, 0x800) syz_emit_ethernet(0x86, &(0x7f0000000080)={@local, @random="31f52699464f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x1, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "6bd60e8c561d4bbfed48726363582d54c82fee2b995254fa2817997b3828a500", "7d60fa6d1c0779e6cb3d5656f3959461", {"9e6946ecbd671680e02dce79b473ee4c", "ea9e52a8c1613f41ebf64e747375bc12"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f0000000400), 0x0, 0x10000, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) [ 132.094429] FAT-fs (loop0): Unrecognized mount option "" or missing value 18:02:19 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000c00)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000001c0)=0x2) syz_mount_image$tmpfs(0x0, 0x0, 0x11, 0x4, &(0x7f00000008c0)=[{0x0}, {0x0}, {&(0x7f00000006c0)="16", 0x1, 0x7fffffff}, {0x0, 0x0, 0x80000000}], 0x0, 0x0) [ 132.670259] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=0s [ 132.672219] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 132.673640] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 132.674980] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 07 ff c0 00 00 02 00 [ 132.676552] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 132.679420] blk_update_request: I/O error, dev loop4, sector 2096896 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 132.682043] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 132.683268] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 132.685448] blk_update_request: I/O error, dev loop4, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 132.687628] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 132.689324] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 132.690597] blk_update_request: I/O error, dev sr0, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 132.693024] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 132.694175] blk_update_request: I/O error, dev sr0, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 132.696419] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 132.697570] blk_update_request: I/O error, dev sr0, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 132.699804] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 132.700921] blk_update_request: I/O error, dev sr0, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 132.703329] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 132.704469] blk_update_request: I/O error, dev sr0, sector 2096901 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 132.706731] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 132.707855] blk_update_request: I/O error, dev sr0, sector 2096902 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 132.710288] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 132.712191] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 132.713820] Buffer I/O error on dev loop4, logical block 2096898, async page read [ 132.715380] Buffer I/O error on dev loop4, logical block 2096899, async page read [ 132.716931] Buffer I/O error on dev loop4, logical block 2096900, async page read [ 132.718513] Buffer I/O error on dev loop4, logical block 2096901, async page read [ 132.720057] Buffer I/O error on dev loop4, logical block 2096902, async page read [ 132.721626] Buffer I/O error on dev loop4, logical block 2096903, async page read [ 132.818699] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 132.820003] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 132.821233] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 132.822465] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 132.823675] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 132.824884] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 132.826147] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 132.827369] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 132.828654] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 132.830283] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 132.864615] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 132.865895] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 132.867107] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 132.868333] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 132.869574] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 132.870784] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 132.871999] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 132.873225] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.053393] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.055930] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.058376] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.059733] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.061136] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.062549] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.063893] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.065287] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.189515] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.190935] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.192325] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.193734] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.195070] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.196431] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.197820] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.199175] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 18:02:33 executing program 0: semctl$IPC_RMID(0x0, 0x0, 0x10) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000180), 0x812004, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = semget(0x2, 0x2, 0x40) semtimedop(r0, &(0x7f0000000280)=[{0x3, 0xed, 0x1000}, {0x3, 0x80, 0x800}, {0x4, 0x4, 0x1800}, {0x3, 0x2}], 0x4, &(0x7f0000000300)={0x77359400}) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)={0x0, 0x82}, 0x18) semtimedop(0x0, &(0x7f0000000200)=[{0x0, 0xd18, 0x1800}, {0x2, 0x1, 0x800}], 0x2, &(0x7f0000000240)={0x0, 0x989680}) getsockname(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f00000010c0)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x6c) semop(0x0, &(0x7f0000000080)=[{}, {}], 0x2) semctl$SEM_INFO(0x0, 0x1, 0x13, &(0x7f00000000c0)=""/4096) semop(0x0, &(0x7f0000000040)=[{0x4, 0x7, 0x2000}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) dup2(r3, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) sendfile(r1, r2, 0x0, 0x100000001) 18:02:33 executing program 1: ftruncate(0xffffffffffffffff, 0x8) r0 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c", 0x3}, 0x48, 0xfffffffffffffffe) keyctl$chown(0x4, 0x0, 0xee01, 0xee00) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000004c0)={@multicast1, @broadcast}, 0x0) r1 = add_key$keyring(&(0x7f0000000640), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, 0x0) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000180)='dns_resolver\x00', 0x0, 0x0, 0x0, r2) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000000)=@keyring={'key_or_keyring:', 0x0, 0xa}) add_key$keyring(&(0x7f0000000340), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000540)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000ac0)={0x17412c500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) request_key(&(0x7f0000000080)='trusted\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000280)='syz', 0xfffffffffffffffb) 18:02:33 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000700)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/nf_conntrack\x00') writev(r1, &(0x7f0000000200)=[{&(0x7f0000000040)='3', 0x1}, {&(0x7f0000000100)}], 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)=""/170, 0xaa}], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000700)='clear_refs\x00') writev(r2, &(0x7f0000000200)=[{&(0x7f0000000040)='3', 0x1}, {&(0x7f0000000100)='5T', 0x2}], 0x2) accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000140)=0x14, 0x80800) ftruncate(0xffffffffffffffff, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="004240001d4cabff3eceb9aa6ea562c122180055cef918a768a199214650341aac4f", @ANYRES16=r4, @ANYBLOB="010000000000000000000100000008000700ac1414bb080008007f0000080800010029275c000800020005000000"], 0x34}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000240)={'wpan4\x00'}) unshare(0x48020200) 18:02:33 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000003c0)={0x1, 0x0, 0x8, "d0"}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom1\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, &(0x7f0000000040)=0x3, 0x7ff, 0x0) 18:02:33 executing program 7: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) ioctl$HIDIOCGPHYS(r0, 0x80404812, 0x0) ioctl$HIDIOCSFLAG(0xffffffffffffffff, 0x4004480f, &(0x7f00000000c0)=0x2) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x2c, 0x0, 0x0, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000}, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0xc0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x501100, 0x0) getsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000080), &(0x7f0000000100)=0x4) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) r4 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x40012180}, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) r7 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r5, r6, &(0x7f0000000100)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x40012180}, 0x0) r8 = perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x6, 0xf3, 0x7, 0x74, 0x0, 0x81, 0x80928, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000140), 0x7}, 0x18004, 0x100000001, 0x1, 0x1, 0x8, 0x7, 0x3, 0x0, 0x1, 0x0, 0x5}, 0x0, 0xf, 0xffffffffffffffff, 0xe) syz_io_uring_submit(r2, r6, &(0x7f0000000180)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x1, 0x0, @fd=r8, 0x0, 0x0, 0x2, 0x4, 0xb43439404e0688b5}, 0xb65) syz_mount_image$nfs4(&(0x7f0000000840), &(0x7f0000000880)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{&(0x7f00000008c0), 0x0, 0x8000}], 0x40c800, &(0x7f0000001900)={[{'wlan1\x00'}, {'#\'\"[-['}, {'nl80211\x00'}, {'\xff\xff\xff\xff\xff\xff'}, {'!#*{-\xb2*&'}], [{@seclabel}]}) 18:02:33 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setstatus(r1, 0x4, 0x2000) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x6, @mcast2, 0xdc6}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$inet6(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="29719ea84f4503ceb5fcf5ea0549f4ae77ab00abd023edee71c45435000086c5813ebf7039", 0x25}], 0x1}, 0x10044001) r2 = fork() setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000000140)=0x400, 0x4) ptrace$setopts(0x4200, r2, 0x9, 0x0) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000040)=r2) r3 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r3) bind$inet6(r3, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @mcast2}, 0x1c) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240), 0xc82, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x7, 0x1f, 0x4, 0x3, 0x0, 0x3, 0x8, 0xa, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000040), 0x8}, 0x4800, 0x8, 0x3c1, 0x3, 0x8, 0x20, 0x6, 0x0, 0x800, 0x0, 0x5}, r2, 0x7, r4, 0x1) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ftruncate(r5, 0x1f) r6 = socket$netlink(0x10, 0x3, 0x0) dup3(r6, r0, 0x0) 18:02:33 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f00000004c0)) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x19, 0x0, 0xfe, 0x1, 0x0, 0x9, 0x165cce79d6df8c8f, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x7fff, 0x2, @perf_config_ext={0x7fff, 0x4}, 0x8028, 0x8, 0x10001, 0x2, 0x1f, 0x0, 0x3ff, 0x0, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0x8, r1, 0x0) 18:02:33 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) truncate(&(0x7f0000000000)='./file0\x00', 0x40) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="0040abe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) openat(r2, &(0x7f00000001c0)='./file0\x00', 0x40, 0x0) [ 148.092498] nfs4: Unknown parameter 'wlan1' [ 148.094201] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 148.094201] program syz-executor.4 not setting count and/or reply_len properly 18:02:35 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) write$rfkill(r0, &(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1}, 0x8) [ 148.227886] FAT-fs (loop4): Unrecognized mount option "@" or missing value [ 148.583906] [ 148.584149] ====================================================== [ 148.584840] WARNING: possible circular locking dependency detected [ 148.585526] 5.10.200 #1 Not tainted [ 148.585964] ------------------------------------------------------ [ 148.586648] syz-executor.5/4082 is trying to acquire lock: [ 148.589500] ffff88800bed0ae8 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}, at: __flush_work+0xdd/0xa90 [ 148.592418] [ 148.592418] but task is already holding lock: [ 148.593327] ffff88800bed0f40 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0xef/0x1240 [ 148.594636] [ 148.594636] which lock already depends on the new lock. [ 148.594636] [ 148.595872] [ 148.595872] the existing dependency chain (in reverse order) is: [ 148.597010] [ 148.597010] -> #3 (&hdev->req_lock){+.+.}-{3:3}: [ 148.597967] __mutex_lock+0x13d/0x10b0 [ 148.598633] hci_dev_do_close+0xef/0x1240 [ 148.599345] hci_rfkill_set_block+0x166/0x1a0 [ 148.600100] rfkill_set_block+0x1fd/0x540 [ 148.600796] rfkill_fop_write+0x253/0x4b0 [ 148.601500] vfs_write+0x29a/0xa70 [ 148.602156] ksys_write+0x1f6/0x260 [ 148.602620] do_syscall_64+0x33/0x40 [ 148.603084] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 148.603721] [ 148.603721] -> #2 (rfkill_global_mutex){+.+.}-{3:3}: [ 148.604474] __mutex_lock+0x13d/0x10b0 [ 148.604965] rfkill_register+0x36/0xa10 [ 148.605448] hci_register_dev+0x42e/0xc00 [ 148.605966] __vhci_create_device+0x2c8/0x5c0 [ 148.606518] vhci_open_timeout+0x38/0x50 [ 148.607016] process_one_work+0x9a9/0x14b0 [ 148.607528] worker_thread+0x61d/0x1310 [ 148.608024] kthread+0x38f/0x470 [ 148.608442] ret_from_fork+0x22/0x30 [ 148.608902] [ 148.608902] -> #1 (&data->open_mutex){+.+.}-{3:3}: [ 148.609623] __mutex_lock+0x13d/0x10b0 [ 148.610108] vhci_send_frame+0x63/0xa0 [ 148.610593] hci_send_frame+0x1b9/0x320 [ 148.611069] hci_tx_work+0x10af/0x1660 [ 148.611550] process_one_work+0x9a9/0x14b0 [ 148.612057] worker_thread+0x61d/0x1310 [ 148.612535] kthread+0x38f/0x470 [ 148.612950] ret_from_fork+0x22/0x30 [ 148.613403] [ 148.613403] -> #0 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 148.614255] __lock_acquire+0x29e7/0x5b00 [ 148.614756] lock_acquire+0x197/0x470 [ 148.615222] __flush_work+0x105/0xa90 [ 148.615686] hci_dev_do_close+0x131/0x1240 [ 148.616200] hci_rfkill_set_block+0x166/0x1a0 [ 148.616745] rfkill_set_block+0x1fd/0x540 [ 148.617243] rfkill_fop_write+0x253/0x4b0 [ 148.617754] vfs_write+0x29a/0xa70 [ 148.618193] ksys_write+0x1f6/0x260 [ 148.618633] do_syscall_64+0x33/0x40 [ 148.619092] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 148.619694] [ 148.619694] other info that might help us debug this: [ 148.619694] [ 148.620585] Chain exists of: [ 148.620585] (work_completion)(&hdev->tx_work) --> rfkill_global_mutex --> &hdev->req_lock [ 148.620585] [ 148.622030] Possible unsafe locking scenario: [ 148.622030] [ 148.622699] CPU0 CPU1 [ 148.623217] ---- ---- [ 148.623728] lock(&hdev->req_lock); [ 148.624141] lock(rfkill_global_mutex); [ 148.624862] lock(&hdev->req_lock); [ 148.625552] lock((work_completion)(&hdev->tx_work)); [ 148.626138] [ 148.626138] *** DEADLOCK *** [ 148.626138] [ 148.626799] 2 locks held by syz-executor.5/4082: [ 148.627317] #0: ffffffff85619468 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0xff/0x4b0 [ 148.628351] #1: ffff88800bed0f40 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0xef/0x1240 [ 148.629344] [ 148.629344] stack backtrace: [ 148.629857] CPU: 0 PID: 4082 Comm: syz-executor.5 Not tainted 5.10.200 #1 [ 148.630612] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 148.631541] Call Trace: [ 148.631832] dump_stack+0x107/0x167 [ 148.632236] check_noncircular+0x263/0x2e0 [ 148.632706] ? register_lock_class+0xbb/0x17b0 [ 148.633219] ? print_circular_bug+0x470/0x470 [ 148.633726] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 148.634220] __lock_acquire+0x29e7/0x5b00 [ 148.634681] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 148.635268] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 148.635852] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 148.636451] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 148.637056] lock_acquire+0x197/0x470 [ 148.637480] ? __flush_work+0xdd/0xa90 [ 148.637926] ? lock_release+0x680/0x680 [ 148.638371] ? lock_release+0x680/0x680 [ 148.638812] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 148.639393] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 148.639989] ? trace_hardirqs_on+0x5b/0x180 [ 148.640457] __flush_work+0x105/0xa90 [ 148.640873] ? __flush_work+0xdd/0xa90 [ 148.641306] ? queue_delayed_work_on+0xe0/0xe0 [ 148.641811] ? hci_dev_do_close+0xef/0x1240 [ 148.642287] ? __cancel_work_timer+0x2a9/0x4c0 [ 148.642790] ? mutex_lock_io_nested+0xf30/0xf30 [ 148.643309] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 148.643963] ? cancel_delayed_work+0x24d/0x2b0 [ 148.644589] ? trace_hardirqs_on+0x5b/0x180 [ 148.645065] ? cancel_delayed_work+0x1b8/0x2b0 [ 148.645570] ? cancel_delayed_work_sync+0x20/0x20 [ 148.646115] hci_dev_do_close+0x131/0x1240 [ 148.646584] ? hci_dev_open+0x350/0x350 [ 148.647018] ? hci_rfkill_set_block+0x15e/0x1a0 [ 148.647542] hci_rfkill_set_block+0x166/0x1a0 [ 148.648031] ? hci_power_off+0x20/0x20 [ 148.648458] rfkill_set_block+0x1fd/0x540 [ 148.648915] rfkill_fop_write+0x253/0x4b0 [ 148.649369] ? rfkill_sync_work+0xa0/0xa0 [ 148.649832] ? security_file_permission+0x24e/0x570 [ 148.650378] ? rfkill_sync_work+0xa0/0xa0 [ 148.650834] vfs_write+0x29a/0xa70 [ 148.651218] ksys_write+0x1f6/0x260 [ 148.651616] ? __ia32_sys_read+0xb0/0xb0 [ 148.652061] ? syscall_enter_from_user_mode+0x1d/0x50 [ 148.652624] do_syscall_64+0x33/0x40 [ 148.653036] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 148.653597] RIP: 0033:0x7fbcb88e4b19 [ 148.654016] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 148.656028] RSP: 002b:00007fbcb5e5a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 148.656856] RAX: ffffffffffffffda RBX: 00007fbcb89f7f60 RCX: 00007fbcb88e4b19 [ 148.657645] RDX: 0000000000000008 RSI: 00000000200000c0 RDI: 0000000000000003 [ 148.658413] RBP: 00007fbcb893ef6d R08: 0000000000000000 R09: 0000000000000000 [ 148.659188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 148.659964] R13: 00007ffce4e57bdf R14: 00007fbcb5e5a300 R15: 0000000000022000 [ 149.045843] rfkill: input handler enabled [ 149.048786] rfkill: input handler disabled [ 149.051817] rfkill: input handler enabled [ 157.305343] audit: type=1400 audit(1700330564.496:11): avc: denied { module_load } for pid=4104 comm="syz-executor.6" path=2F6D656D66643A202864656C6574656429 dev="tmpfs" ino=10 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=system permissive=1 [ 157.310453] rfkill: input handler disabled 18:02:44 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) write$rfkill(r0, &(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1}, 0x8) 18:02:44 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) inotify_init1(0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = inotify_init1(0x0) socket$inet6(0xa, 0x1, 0xffff) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000001480)=[{&(0x7f0000000180)=""/204, 0xcc}, {&(0x7f0000000280)=""/129, 0x81}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/79, 0x4f}, {&(0x7f00000013c0)=""/137, 0x89}], 0x5) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000140)={0xffffffffffffffff, 0x9, 0x7, 0x9}) inotify_add_watch(r0, &(0x7f00000000c0)='./file0\x00', 0x2000088) 18:02:44 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000001900)=[{0x0, 0x0, 0x7fff}]) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) pidfd_send_signal(r0, 0x3, &(0x7f0000000240)={0x27, 0x4619, 0x6}, 0x0) pidfd_send_signal(r0, 0x3f, &(0x7f0000000380)={0x23, 0x5, 0x6}, 0x0) r1 = dup(r0) pidfd_send_signal(r1, 0x0, &(0x7f0000000040)={0xb, 0x5, 0x2000000}, 0x0) syz_io_uring_setup(0x15c, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, r1}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000002a40)=0x0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000140)) syz_io_uring_submit(0x0, r2, &(0x7f0000000440)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r1, 0x0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000780)=""/4096, 0x1000}, 0x0, 0x0, 0x1, {0x1}}, 0x101) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000540)={{{@in6, @in6=@dev}}, {{@in=@multicast1}, 0x0, @in6=@mcast1}}, &(0x7f0000000000)=0xe8) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/class/drm', 0x970c7917c8cb9e10, 0x2) stat(&(0x7f00000001c0)='.\x00', &(0x7f0000001c00)) dup(r0) r4 = socket$inet(0x2, 0x3, 0x40) syz_read_part_table(0x0, 0x0, &(0x7f0000001840)) sendmmsg$inet(r4, &(0x7f00000002c0)=[{{&(0x7f0000002740)={0x2, 0x0, @empty}, 0x10, 0x0, 0x0, &(0x7f0000001940)=ANY=[@ANYBLOB="18000000000000000001003d54a654ccd23b2e5187caf1b643540000000000000000b8af8f1fd410f526d88f1f8af2cfbbdc0000d5007600"/65], 0x18}}], 0x1, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000700)=@IORING_OP_WRITEV={0x2, 0x1, 0x2007, @fd_index=0xa, 0x7f, &(0x7f0000000500)=[{&(0x7f0000000480)="bb024c69755e206d05b31065900010df58e4974e35dcf2a087a40e184899f3d6047a35b7253f48f6ce6594cd14a3018e3a7e86a44e06f1dbc01761bcd7a4ec3339c0768e7539014e60bf987583afa915b1", 0x51}, {&(0x7f0000000640)="5e8569ab6f02a7d5e01d991aa886eb33d57eb743219a7adff177dd0974a1e56944f84e80be535418540ae96f90d13a1fa5fbecfe3a47f7fde121708514c638d88ac95e763e64a2a2c2121e7e524716a0e94ff2abf9d37384a697a5359ac207ed5ca6a9a4b7483f0582598fd03a6bad682529b6e2f3ed37ef5ceeb4638e6448558c8b91a829f7b81f879bdb0d947fe06807d4a7c14c988bc70aa93340412d5925c4ef1ddc90d1da165e91742f3e1cb1ba278311eb729b6fb361bb2537ebcc0a7e", 0xc0}, {&(0x7f0000001780)="ff52023991a4f9811c9af4301173db45a53d393b4bdc9e2e55ff441f8dffb1af526a90b00ddbb87afedc0bcc766bd0bb9ca6ede2512c5d66cf05da27aa5465a3ee4f3d47fcd49accee97caedc17878ad2f56a30b4d6e4cca91111ba823b067fed613868f2def5919c8654c0d1179680e08f68340b502e4798e16546e48f1433cb93a6490bfe1c264cef4d98246f0957e2446bccdbb4cc2fa1bac65105c75246438a93d", 0xa3}, {&(0x7f0000000200)="54dbb557609a966157ee8e4fd3346f2138c9cc3dd861dba9376e818ed13ac73e42fb86f43e30e2", 0x27}], 0x4, 0xe, 0x1, {0x2, r5}}, 0x5) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300), 0x800) 18:02:44 executing program 7: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat2(r1, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) utimes(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={{}, {0x77359400}}) mount$cgroup(0x0, &(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000001200)=ANY=[@ANYBLOB="e34118032ab4af0e2c0743459ab86ac7775797e44b9b27b420e02ef44e7f3fe83b792d079011467dcbe36b4e1500c13a3dc90c401900bc77fa2bb04e3f7738698a21dcaf014afcafb1362d43be3198374ee993e8bc8d5fe2048dced57405f93c18243c91c35f0a597968bbc8a037459bca477e6db87b"]) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) openat(0xffffffffffffffff, &(0x7f0000000f80)='./file1\x00', 0x400, 0x101) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000001280)=ANY=[@ANYRESHEX, @ANYRESDEC, @ANYRES64]) r2 = fsmount(r0, 0x1, 0x71) ioctl$BTRFS_IOC_DEV_REPLACE(r2, 0xca289435, &(0x7f0000000500)={0x1, 0x9, @start={0x0, 0x1, "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", "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"}, [0x100000000, 0x3ff, 0x6, 0x0, 0x401, 0x8001, 0x3ff, 0x3f, 0x7, 0x27a, 0x10001, 0x4, 0x8001, 0x7c1b, 0xfff, 0x3, 0x80, 0x1, 0x8, 0x101, 0x7fffffff, 0x8, 0x400, 0x7, 0x2, 0x9, 0x1, 0x0, 0x4, 0x2, 0x7fff, 0x8, 0x6, 0x117e, 0x7ff, 0xfffffffffffffffd, 0x7, 0x10001, 0xd56, 0x7, 0xa58f, 0x8, 0x400, 0x700000000, 0x7, 0xfffffffffffff801, 0x1, 0x200000087, 0xd6e3, 0x8, 0x6, 0x4, 0x6, 0xfffffffffffffff8, 0x6, 0x2, 0xffffffff, 0xffffffffffffff01, 0x9d36, 0x0, 0x1ff, 0xfdeb, 0x0, 0x7]}) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r2, 0x3312, 0x8) mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) stat(&(0x7f0000000180)='./file1\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000300)='./file0\x00', &(0x7f0000000440)='./mnt\x00', &(0x7f0000000480), 0x115549713482a633, &(0x7f00000010c0)=ANY=[@ANYBLOB="7472616e733d756e69782c726f6f74636f6e746578743d73797374656d5f752c736d61636b6673726f6f743d7072656665722c66736d616769633d3078303030303030303030303030303030342c7569643c3bfa463b488fabf81240ac68fb4baa55ef3be0ff6dceb7941bd5cb13bdfe3ba280c747bb15c1d94a0137e51f8ffd81d8957c4b33ec2c0be9a0dae438c4673ab856d3e7c16f1e2b312aef3df9f99d1c555edb414e0b8dd89283340ce746ce50fdb7c72c16c076ae867ea8a3f8536cac4f6b4307db7d", @ANYRESDEC, @ANYBLOB=',dont_measure,fowner>', @ANYRESDEC=r4, @ANYBLOB=',fsmagyc=0x0000001000000006,\x00']) mount$cgroup(0x0, &(0x7f0000000340)='./file1\x00', &(0x7f00000004c0), 0x800040, &(0x7f0000000fc0)={[{@clone_children}, {@xattr}, {}, {@subsystem='pids'}, {@cpuset_v2_mode}, {@none}, {@none}, {@release_agent={'release_agent', 0x3d, './file1'}}], [{@euid_lt={'euid<', r3}}, {@pcr={'pcr', 0x3d, 0xd}}, {@pcr={'pcr', 0x3d, 0x16}}, {@measure}, {@fowner_gt={'fowner>', r4}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@uid_eq={'uid', 0x3d, r3}}]}) mount$cgroup(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x2812020, &(0x7f00000013c0)=ANY=[@ANYBLOB="6e616d653d2f6465762f736e617073686f74002c6370757365745f76325f6d6f64652c616c6c2c6e6f6e652c78617474722c6e6f7072656669782c636c6f6e655f6368696c6472656e2c68756765746c622c66736e616d653d2f6465762f7a65726f002c736d61636b6673666c6f6f723d2e282b2d5e2c6f626a5f726f6c653d5e28b0dcd8c1998ea855967100e7d77600becbd62560d15252cda9675da72ac958a7d32c00a32d75bc04e165bd23b314b90ba6aebccdc5a9d700"/196]) 18:02:44 executing program 4: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) r2 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r2, {0x4}}, './file1\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r4, 0x89f7, &(0x7f0000000480)={'ip6tnl0\x00', &(0x7f0000000400)={'sit0\x00', 0x0, 0x2f, 0x20, 0x1, 0xfffffffe, 0x28, @remote, @empty, 0x10, 0x700, 0x1, 0x7}}) r5 = fcntl$dupfd(r2, 0x0, r3) ioctl$SG_NEXT_CMD_LEN(r5, 0x2283, &(0x7f0000000000)=0x1) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000040)="0040abe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000140)={0x20, "876820ee1b7a7502c51a1079250af24cc36cb5a3ef3cafea3329f1a570787a9650bd7190bb140af0ab0bb057388b9600fa952afc8194d5d217363f2c49fbc775b72d7553f3aaee3c6fc46e2ad59022cfb3d021acb98d988090dee3edc6a93a6fc62292958655b5d3263d0fc89d752c29b9215a21aa5d229d212764dfef6c49c1bff6686c67e6b0f923b70b137f8681831e32d6fc590000e1fac240a180d8dcd03a19eb5b3860959fb09dd9e920ef1309f2cacec693a5c8581000bd8b705f417d2d8133bbcb16f1dde84b23e3bf4fff9f528adcef2c56f0ac082129c444b9b1fc8560fbbb056a413ae564026e371f165120d490c06e843de03fb284e7d07798d277bf258fad43cd39b14227609642917f3364f72f33b19ac7ad9fa7c0b5536ba5fc6d7044f2f2a4c16b93abe5832599f975ed2f2ca691f5dbdf28ec692bf7fc195728701bfdb308e17bc90f11c1429713382fdabf543348f64de69a0a3d4f0c167d32fe5e658397ab0c82a65feb5aaeba77b40562a89937699611a802fd99711e3ce0ec769d4074deb12ef0b18d749f4aac1023cc07b1dfcbd895e8220c428054d8091de955a2bc6b8a59982c962fd4bfdc1610995a54ef1e45e20d664fd3d444e7052b90ed9d2c4d001ee410949ec36ea9415a3b9ae262d6b03b7643ca3170f0db983579dfe3cc9401f1278d0a2462cee643dccc51168c7461c869f083b3e2b9"}) sendfile(r0, r5, 0x0, 0x100000001) 18:02:44 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f00000004c0)) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x19, 0x0, 0xfe, 0x1, 0x0, 0x9, 0x165cce79d6df8c8f, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x7fff, 0x2, @perf_config_ext={0x7fff, 0x4}, 0x8028, 0x8, 0x10001, 0x2, 0x1f, 0x0, 0x3ff, 0x0, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0x8, r1, 0x0) 18:02:44 executing program 1: ftruncate(0xffffffffffffffff, 0x8) r0 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c", 0x3}, 0x48, 0xfffffffffffffffe) keyctl$chown(0x4, 0x0, 0xee01, 0xee00) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000004c0)={@multicast1, @broadcast}, 0x0) r1 = add_key$keyring(&(0x7f0000000640), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, 0x0) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000180)='dns_resolver\x00', 0x0, 0x0, 0x0, r2) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000000)=@keyring={'key_or_keyring:', 0x0, 0xa}) add_key$keyring(&(0x7f0000000340), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000540)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000ac0)={0x17412c500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) request_key(&(0x7f0000000080)='trusted\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000280)='syz', 0xfffffffffffffffb) 18:02:44 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2, 0x0, 0x2000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x101}}, '.\x00'}) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x80, 0x24, 0x0, 0x7, 0x0, 0x2000400000, 0x44, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x328, 0x2, @perf_bp={&(0x7f0000000000), 0xed6c989a5a20fb1}, 0x302, 0x10001, 0xffffffed, 0x8, 0xc7, 0x81, 0x5, 0x0, 0x3998, 0x0, 0x400}, 0x0, 0x4, r2, 0x9) fstat(r1, &(0x7f0000002d00)) [ 157.312582] Module has invalid ELF structures [ 157.329752] Module has invalid ELF structures [ 157.334388] rfkill: input handler enabled [ 157.347269] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 157.347269] program syz-executor.4 not setting count and/or reply_len properly 18:02:44 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) write$rfkill(r0, &(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1}, 0x8) 18:02:44 executing program 0: mq_notify(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x4, @thr={0x0, &(0x7f0000000140)="ee968433bcff5e13084c71a5779aad1f8a2c52eeffe263c729ccca4cab4c07d12cc1981a5c7d03a1fbea2f79f6361e369229db302043ce2a5447a671a5d5c2bf268e2704f01761ca985414b01e6b38f6ceea0e963c5ae3eb1f5836d51c423d11754d32d4861a2cebd3a8f567f3335e15c1c950b16aa9f923616a6b24afa6935f04befc25cc31ae0bea0d6e5e71cde511d937579e8999ee51b69aeab59066f5b0ea4c07f11318061364f160bc2b020d779e8a8cc3915f86077a78eee9e89cf5f43f8e4562d10c7220b863badbab6be55f7c"}}) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x260d01, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e21, 0x6, @mcast2, 0xdc6}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="29719ea84f4503ceb5fcf5ea0549f4ae77ab00abd023edee71c45435000086c5813ebf7039", 0x25}], 0x1}, 0x10044001) r2 = fork() setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000140)=0x400, 0x4) ptrace$setopts(0x4200, r2, 0x9, 0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000040)=r2) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x6c, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void, @val={0xc, 0x99, {0x6, 0x50}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x4, 0x2}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x55}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4d}, @NL80211_ATTR_PID={0x8, 0x52, r2}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x49}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4004000}, 0x40440b0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/rcupdate', 0x440, 0x29) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240), 0x8100, 0x0) syz_io_uring_setup(0x4bf1, &(0x7f0000000280)={0x0, 0x0, 0x4, 0xfffffcbf, 0x2f, 0x0, r3}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000000300), &(0x7f0000000340)) mq_open(&(0x7f0000000380)='/dev/sr0\x00', 0x80, 0x38, &(0x7f00000003c0)={0x19, 0x7fff, 0x400, 0x7}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0xfdef) [ 157.397143] PM: hibernation: Marking nosave pages: [mem 0x00000000-0x00000fff] [ 157.398675] PM: hibernation: Marking nosave pages: [mem 0x0009f000-0x000fffff] [ 157.400261] PM: hibernation: Basic memory bitmaps created [ 157.538570] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 157.538570] program syz-executor.4 not setting count and/or reply_len properly [ 157.548442] rfkill: input handler disabled 18:02:44 executing program 4: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) r2 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r2, {0x4}}, './file1\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r4, 0x89f7, &(0x7f0000000480)={'ip6tnl0\x00', &(0x7f0000000400)={'sit0\x00', 0x0, 0x2f, 0x20, 0x1, 0xfffffffe, 0x28, @remote, @empty, 0x10, 0x700, 0x1, 0x7}}) r5 = fcntl$dupfd(r2, 0x0, r3) ioctl$SG_NEXT_CMD_LEN(r5, 0x2283, &(0x7f0000000000)=0x1) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000040)="0040abe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000140)={0x20, "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"}) sendfile(r0, r5, 0x0, 0x100000001) 18:02:44 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f00000004c0)) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x19, 0x0, 0xfe, 0x1, 0x0, 0x9, 0x165cce79d6df8c8f, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x7fff, 0x2, @perf_config_ext={0x7fff, 0x4}, 0x8028, 0x8, 0x10001, 0x2, 0x1f, 0x0, 0x3ff, 0x0, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0x8, r1, 0x0) [ 157.619153] PM: hibernation: Basic memory bitmaps freed 18:02:44 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x123001, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r1, 0x3304) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @fixed, 0x0, 0x2}, 0xe) 18:02:44 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000001900)=[{0x0, 0x0, 0x7fff}]) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) pidfd_send_signal(r0, 0x3, &(0x7f0000000240)={0x27, 0x4619, 0x6}, 0x0) pidfd_send_signal(r0, 0x3f, &(0x7f0000000380)={0x23, 0x5, 0x6}, 0x0) r1 = dup(r0) pidfd_send_signal(r1, 0x0, &(0x7f0000000040)={0xb, 0x5, 0x2000000}, 0x0) syz_io_uring_setup(0x15c, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, r1}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000002a40)=0x0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000140)) syz_io_uring_submit(0x0, r2, &(0x7f0000000440)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r1, 0x0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000780)=""/4096, 0x1000}, 0x0, 0x0, 0x1, {0x1}}, 0x101) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000540)={{{@in6, @in6=@dev}}, {{@in=@multicast1}, 0x0, @in6=@mcast1}}, &(0x7f0000000000)=0xe8) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/class/drm', 0x970c7917c8cb9e10, 0x2) stat(&(0x7f00000001c0)='.\x00', &(0x7f0000001c00)) dup(r0) r4 = socket$inet(0x2, 0x3, 0x40) syz_read_part_table(0x0, 0x0, &(0x7f0000001840)) sendmmsg$inet(r4, &(0x7f00000002c0)=[{{&(0x7f0000002740)={0x2, 0x0, @empty}, 0x10, 0x0, 0x0, &(0x7f0000001940)=ANY=[@ANYBLOB="18000000000000000001003d54a654ccd23b2e5187caf1b643540000000000000000b8af8f1fd410f526d88f1f8af2cfbbdc0000d5007600"/65], 0x18}}], 0x1, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000700)=@IORING_OP_WRITEV={0x2, 0x1, 0x2007, @fd_index=0xa, 0x7f, &(0x7f0000000500)=[{&(0x7f0000000480)="bb024c69755e206d05b31065900010df58e4974e35dcf2a087a40e184899f3d6047a35b7253f48f6ce6594cd14a3018e3a7e86a44e06f1dbc01761bcd7a4ec3339c0768e7539014e60bf987583afa915b1", 0x51}, {&(0x7f0000000640)="5e8569ab6f02a7d5e01d991aa886eb33d57eb743219a7adff177dd0974a1e56944f84e80be535418540ae96f90d13a1fa5fbecfe3a47f7fde121708514c638d88ac95e763e64a2a2c2121e7e524716a0e94ff2abf9d37384a697a5359ac207ed5ca6a9a4b7483f0582598fd03a6bad682529b6e2f3ed37ef5ceeb4638e6448558c8b91a829f7b81f879bdb0d947fe06807d4a7c14c988bc70aa93340412d5925c4ef1ddc90d1da165e91742f3e1cb1ba278311eb729b6fb361bb2537ebcc0a7e", 0xc0}, {&(0x7f0000001780)="ff52023991a4f9811c9af4301173db45a53d393b4bdc9e2e55ff441f8dffb1af526a90b00ddbb87afedc0bcc766bd0bb9ca6ede2512c5d66cf05da27aa5465a3ee4f3d47fcd49accee97caedc17878ad2f56a30b4d6e4cca91111ba823b067fed613868f2def5919c8654c0d1179680e08f68340b502e4798e16546e48f1433cb93a6490bfe1c264cef4d98246f0957e2446bccdbb4cc2fa1bac65105c75246438a93d", 0xa3}, {&(0x7f0000000200)="54dbb557609a966157ee8e4fd3346f2138c9cc3dd861dba9376e818ed13ac73e42fb86f43e30e2", 0x27}], 0x4, 0xe, 0x1, {0x2, r5}}, 0x5) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300), 0x800) [ 157.651249] rfkill: input handler enabled [ 157.678824] PM: hibernation: Marking nosave pages: [mem 0x00000000-0x00000fff] [ 157.680034] PM: hibernation: Marking nosave pages: [mem 0x0009f000-0x000fffff] [ 157.681191] PM: hibernation: Basic memory bitmaps created [ 157.682823] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 157.682823] program syz-executor.4 not setting count and/or reply_len properly [ 157.699275] PM: hibernation: Basic memory bitmaps freed 18:02:44 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) write$rfkill(r0, &(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1}, 0x8) [ 157.729875] PM: hibernation: Marking nosave pages: [mem 0x00000000-0x00000fff] [ 157.731066] PM: hibernation: Marking nosave pages: [mem 0x0009f000-0x000fffff] [ 157.732244] PM: hibernation: Basic memory bitmaps created [ 157.758277] PM: hibernation: Basic memory bitmaps freed 18:02:44 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000001900)=[{0x0, 0x0, 0x7fff}]) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) pidfd_send_signal(r0, 0x3, &(0x7f0000000240)={0x27, 0x4619, 0x6}, 0x0) pidfd_send_signal(r0, 0x3f, &(0x7f0000000380)={0x23, 0x5, 0x6}, 0x0) r1 = dup(r0) pidfd_send_signal(r1, 0x0, &(0x7f0000000040)={0xb, 0x5, 0x2000000}, 0x0) syz_io_uring_setup(0x15c, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, r1}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000002a40)=0x0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000140)) syz_io_uring_submit(0x0, r2, &(0x7f0000000440)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r1, 0x0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000780)=""/4096, 0x1000}, 0x0, 0x0, 0x1, {0x1}}, 0x101) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000540)={{{@in6, @in6=@dev}}, {{@in=@multicast1}, 0x0, @in6=@mcast1}}, &(0x7f0000000000)=0xe8) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/class/drm', 0x970c7917c8cb9e10, 0x2) stat(&(0x7f00000001c0)='.\x00', &(0x7f0000001c00)) dup(r0) r4 = socket$inet(0x2, 0x3, 0x40) syz_read_part_table(0x0, 0x0, &(0x7f0000001840)) sendmmsg$inet(r4, &(0x7f00000002c0)=[{{&(0x7f0000002740)={0x2, 0x0, @empty}, 0x10, 0x0, 0x0, &(0x7f0000001940)=ANY=[@ANYBLOB="18000000000000000001003d54a654ccd23b2e5187caf1b643540000000000000000b8af8f1fd410f526d88f1f8af2cfbbdc0000d5007600"/65], 0x18}}], 0x1, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000700)=@IORING_OP_WRITEV={0x2, 0x1, 0x2007, @fd_index=0xa, 0x7f, &(0x7f0000000500)=[{&(0x7f0000000480)="bb024c69755e206d05b31065900010df58e4974e35dcf2a087a40e184899f3d6047a35b7253f48f6ce6594cd14a3018e3a7e86a44e06f1dbc01761bcd7a4ec3339c0768e7539014e60bf987583afa915b1", 0x51}, {&(0x7f0000000640)="5e8569ab6f02a7d5e01d991aa886eb33d57eb743219a7adff177dd0974a1e56944f84e80be535418540ae96f90d13a1fa5fbecfe3a47f7fde121708514c638d88ac95e763e64a2a2c2121e7e524716a0e94ff2abf9d37384a697a5359ac207ed5ca6a9a4b7483f0582598fd03a6bad682529b6e2f3ed37ef5ceeb4638e6448558c8b91a829f7b81f879bdb0d947fe06807d4a7c14c988bc70aa93340412d5925c4ef1ddc90d1da165e91742f3e1cb1ba278311eb729b6fb361bb2537ebcc0a7e", 0xc0}, {&(0x7f0000001780)="ff52023991a4f9811c9af4301173db45a53d393b4bdc9e2e55ff441f8dffb1af526a90b00ddbb87afedc0bcc766bd0bb9ca6ede2512c5d66cf05da27aa5465a3ee4f3d47fcd49accee97caedc17878ad2f56a30b4d6e4cca91111ba823b067fed613868f2def5919c8654c0d1179680e08f68340b502e4798e16546e48f1433cb93a6490bfe1c264cef4d98246f0957e2446bccdbb4cc2fa1bac65105c75246438a93d", 0xa3}, {&(0x7f0000000200)="54dbb557609a966157ee8e4fd3346f2138c9cc3dd861dba9376e818ed13ac73e42fb86f43e30e2", 0x27}], 0x4, 0xe, 0x1, {0x2, r5}}, 0x5) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300), 0x800) 18:02:44 executing program 4: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) r2 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r2, {0x4}}, './file1\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r4, 0x89f7, &(0x7f0000000480)={'ip6tnl0\x00', &(0x7f0000000400)={'sit0\x00', 0x0, 0x2f, 0x20, 0x1, 0xfffffffe, 0x28, @remote, @empty, 0x10, 0x700, 0x1, 0x7}}) r5 = fcntl$dupfd(r2, 0x0, r3) ioctl$SG_NEXT_CMD_LEN(r5, 0x2283, &(0x7f0000000000)=0x1) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000040)="0040abe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000140)={0x20, "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"}) sendfile(r0, r5, 0x0, 0x100000001) [ 158.160738] rfkill: input handler disabled [ 158.227708] rfkill: input handler enabled [ 158.245327] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 158.245327] program syz-executor.4 not setting count and/or reply_len properly VM DIAGNOSIS: 18:02:35 Registers: info registers vcpu 0 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff822ca15c RDI=ffffffff879e81e0 RBP=ffffffff879e81a0 RSP=ffff88802028f290 R8 =0000000000000001 R9 =0000000000000003 R10=000000000000000a R11=0000000000000001 R12=0000000000000020 R13=fffffbfff0f3d088 R14=fffffbfff0f3d03e R15=dffffc0000000000 RIP=ffffffff822ca1b0 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fbcb5e5a700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000056137901fa80 CR3=000000000eaee000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ffffffffffffff00ffffffffffffffff XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffffffff814cd586 RBX=dffffc0000000000 RCX=ffffffff8141ab3f RDX=0000000000000000 RSI=ffffffff814cac4e RDI=ffffffff84bdc708 RBP=ffff8880153e7cd0 RSP=ffff8880153e7c00 R8 =0000000000000000 R9 =0000000000000000 R10=000000007fff0000 R11=0000000000000001 R12=0000000000000055 R13=ffffed1002a7cf9c R14=ffff8880153e7cd0 R15=ffffc900006b3058 RIP=ffffffff81408aa0 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fa665e768c0 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000560fb7c8c720 CR3=00000000152fa000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffff0000ff000000 XMM02=7269762f736563697665642f7379732f XMM03=00000000000000000000560f00716d2f XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=0000560fb7c634400000560fb7c5c9b0 XMM06=0000560fb7c634f00000000000000000 XMM07=00000000000000000000000000000000 XMM08=2f63697361622f6372732f2e2e000d0a XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000